ETW: Microsoft-Windows-Shell-Shwebsvc

f61cefc0-aa2e-11da-a746-0800200c9a66
ETW: Microsoft-Windows-Shell-Shwebsvc

f61cefc0-aa2e-11da-a746-0800200c9a66 2006-03-02 20:56:03⋮60000· ea60 ETW: Microsoft-Windows-Shell-Shwebsvc

Version	1
Variant	specified in RFC 4122
urn	urn:uuid:f61cefc0-aa2e-11da-a746-0800200c9a66
Hexdump	f61cefc0aa2e11daa7460800200c9a66
Bytes	÷␜∩└¬.␑┌ºF␈␀ ␌Üf
Clock ID	10054
Clock ID (hex)	0x2746
Timestamp, RFC	2006-03-02 20:56:03
Timestamp, MS	2024-05-19 20:56:03
Timestamp, UNIX	2393-05-19 20:56:03
Raw hex timestamp	0x1daaa2ef61cefc0
Raw timestamp	133606257635160000
Sub-millisecond timestamp	60000
MAC Address	0800200c9a66
is_local bit	False
is_multicast bit	False
MAC Manufacturer	Oracle
UUIDv1	timestamp + clock_id + version (1) + node ID (MAC)
MAC Date	1998-04-22, deepmac.org, 080020/24

UUID registration form :

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers

Windows Vista Registry
object: reg-subkey
name: None
key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers

from Mikołaj Zalewski's http://mikolajapp2.appspot.com - reg-vista.xml

0 autopush - reg-vista

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: fr-FR,1036
From Get-NetEventProvider

0 c.ps1v001 Microsoft Windows 10 Famille v10.0.19043.0 fr-FR,1036 2022-02-27

0 c.ps1v001 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033 2022-02-28

0 c.ps1v001 Microsoft Windows 10 Pro v6.2.9200.0 de-DE,1031 2022-03-01

0 c.ps1v001 Microsoft Windows 11 Enterprise v10.0.22000.0 en-US,1033 2022-03-01

0 c.ps1v001 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033 2022-03-02

0 c.ps1v001 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033 2022-03-07

0 c.ps1v001 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033 2022-03-07

0 c.ps1v001 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033 2022-03-10

0 c.ps1v001 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033 2022-03-13

0 c.ps1v001 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033 2022-03-16

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: fr-FR,1036,850
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Professionnel v10.0.19043.0 fr-FR,1036,850 2022-03-21

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Professional v6.1.7601.65536 en-US,1033,437 2022-03-21

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 11 Enterprise v10.0.22000.0 en-US,1033,437 2022-03-21

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Professional v6.1.7601.65536 en-US,1033,437 2022-03-21

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Professional v6.1.7601.65536 en-US,1033,437 2022-03-21

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Professional v6.1.7601.65536 en-US,1033,437 2022-03-21

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Professional v6.1.7601.65536 en-US,1033,437 2022-03-21

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Professional v6.1.7601.65536 en-US,1033,437 2022-03-21

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Professional v6.1.7601.65536 en-US,1033,437 2022-03-21

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Professional v6.1.7601.65536 en-US,1033,437 2022-03-21

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2015 LTSB v6.2.9200.0 en-US,1033,437 2022-03-21

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: fr-FR,1036,1252
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Famille v10.0.19043.0 fr-FR,1036,1252 2022-03-21

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 8.1 Enterprise Evaluation v6.2.9200.0 en-US,1033,437 2022-03-22

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: fr-FR,1036,1252
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Entreprise v10.0.18363.0 fr-FR,1036,1252 2022-03-22

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise v6.2.9200.0 en-US,1033,437 2022-03-22

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-IN,16393,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Ultimate v6.1.7601.65536 en-IN,16393,437 2022-03-17

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: de-DE,1031,850
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 de-DE,1031,850 2022-03-23

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: de-DE,1031,850
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 de-DE,1031,850 2022-03-23

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033,437 2022-03-23

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-IN,16393,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Ultimate v6.1.7601.65536 en-IN,16393,437 2022-03-17

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-IN,16393,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Ultimate v6.1.7601.65536 en-IN,16393,437 2022-03-17

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033,437 2022-03-25

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-GB,2057,850
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-GB,2057,850 2022-03-25

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-IN,16393,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Ultimate v6.1.7601.65536 en-IN,16393,437 2022-03-17

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-IN,16393,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Ultimate v6.1.7601.65536 en-IN,16393,437 2022-03-17

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033,437 2022-03-28

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033,437 2022-03-29

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033,437 2022-03-31

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033,437 2022-04-04

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033,437 2022-04-07

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-AT,8192,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-AT,8192,437 2022-04-08

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2022-04-07

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Professional v6.1.7601.65536 en-US,1033,437 2022-04-08

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033,437 2022-04-13

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033,437 2022-04-13

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033,437 2022-04-19

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033,437 2022-04-22

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033,437 2022-04-22

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise 2016 LTSB v6.2.9200.0 en-US,1033,437 2022-04-23

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-AT,8192,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-AT,8192,437 2022-09-02

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-AT,8192,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-AT,8192,437 2022-09-02

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-AT,8192,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-AT,8192,437 2022-09-02

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-AT,8192,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-AT,8192,437 2022-09-02

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-AT,8192,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-AT,8192,437 2022-09-03

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-AT,8192,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-AT,8192,437 2022-09-03

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-AT,8192,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 11 Pro v6.2.9200.0 en-AT,8192,437 2022-09-02

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-AT,8192,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 11 Pro v6.2.9200.0 en-AT,8192,437 2022-09-03

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-AT,8192,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-AT,8192,437 2022-09-04

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-AT,8192,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-AT,8192,437 2022-09-04

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-AT,8192,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-AT,8192,437 2022-09-06

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2022-09-20

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2022-11-04

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Professional v6.1.7601.65536 en-US,1033,437 2022-11-04

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise v6.2.9200.0 en-US,1033,437 2022-11-09

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 7 Ultimate v6.1.7601.65536 en-US,1033,437 2022-11-09

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2023-04-12

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2023-04-12

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2023-04-12

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2023-04-13

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2023-07-06

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise v10.0.15063.0 en-US,1033,437 2023-07-13

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,850
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 11 Enterprise v10.0.22621.0 en-US,1033,850 2023-07-26

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2023-07-29

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2023-07-29

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise v6.2.9200.0 en-US,1033,437 2023-07-31

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Enterprise v6.2.9200.0 en-US,1033,437 2023-10-13

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2023-10-13

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: de-DE,1031,850
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 de-DE,1031,850 2023-11-18

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2023-11-18

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2023-11-19

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,437
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 10 Pro v6.2.9200.0 en-US,1033,437 2023-12-04

ETW: Microsoft-Windows-Shell-Shwebsvc

Locale: en-US,1033,65001
From logman.exe query providers
source: get-etw

0 c.ps1v2022-03-21 Microsoft Windows 11 Pro v10.0.22631.0 en-US,1033,65001 2024-01-02

f61cefc0-aa2e-11da-a746-0800200c9a66ETW: Microsoft-Windows-Shell-Shwebsvc

f61cefc0-aa2e-11da-a746-0800200c9a66
ETW: Microsoft-Windows-Shell-Shwebsvc