A process has exited: Process ID: %1 Image File Name: %2 User Name: %3 Domain: %4 Logon ID: %5

Details
Product: Windows Operating System
Event ID: 593
Source: Security
Version: 5.2
Symbolic Name: SE_AUDITID_PROCESS_EXIT
Message: A process has exited:
Process ID: %1
Image File Name: %2
User Name: %3
Domain: %4
Logon ID: %5
   
Explanation

A user or service has successfully closed a program. This message corresponds to a Security 592 message, which indicates that the program was started. Associated messages have the same Process ID number. Process ID numbers are reused, so a given instance of Security 593 message only corresponds to the most recent Security 592 message with the same Process ID number.

   
User Action

No user action is required.

Related:

Leave a Reply