Message | Id | Version | Qualifiers | Level | Task | Opcode | Keywords | RecordId | ProviderName | ProviderId | LogName | ProcessId | ThreadId | MachineName | UserId | TimeCreated | ActivityId | RelatedActivityId | ContainerLog | MatchedQueryIds | Bookmark | LevelDisplayName | OpcodeDisplayName | TaskDisplayName | KeywordsDisplayNames | Properties |
Operation: Service stopped
Details: The service has stopped.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 196 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 5076 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:51:53 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: https://watson.telemetry.microsoft.com
Created: 2021-01-25T07:48:53.000Z
Expires: 2021-01-26T07:48:52.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 195 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 3588 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:48:53 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2021-01-25T07:48:53Z</wsu:Created><wsu:Expires>2021-01-25T07:53:53Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="2aYoPu+k6P9SOEOAhvFs0V78JeM="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="2aYoPu+k6P9SOEOAhvFs0V78JeM="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 194 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 3588 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:48:53 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2021-01-25T07:48:51Z</wsu:Created><wsu:Expires>2021-01-25T07:53:51Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://watson.telemetry.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 193 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 3588 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:48:52 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 192 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2224 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:48:52 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service stopped
Details: The service has stopped.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 191 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 3184 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:44:03 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: https://settings-win.data.microsoft.com
Created: 2021-01-25T07:41:03.000Z
Expires: 2021-01-26T07:41:03.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 190 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 3744 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:41:03 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2021-01-25T07:41:03Z</wsu:Created><wsu:Expires>2021-01-25T07:46:03Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="2aYoPu+k6P9SOEOAhvFs0V78JeM="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="2aYoPu+k6P9SOEOAhvFs0V78JeM="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 189 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 3744 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:41:03 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2021-01-25T07:41:02Z</wsu:Created><wsu:Expires>2021-01-25T07:46:02Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://settings-win.data.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 188 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 3744 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:41:03 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 187 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 1208 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:41:03 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service stopped
Details: The service has stopped.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 186 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 1260 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:40:39 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header></S:Header><S:Body><ps:DeviceUpdatePropertiesResponse Success="true"><DeviceTpmKeyState>*</DeviceTpmKeyState><License ContentID="3252b20c-d425-4711-8cc5-b2f53c830b76" ID="efd1bfb5-3c13-4b9e-93fd-57575f13b2cb" LicenseID="3252b20c-d425-4711-8cc5-b2f53c830b76" Version="2" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><DeviceID xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</DeviceID></Binding><LicenseInfo Type="Device" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><IssuedDate xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</IssuedDate></LicenseInfo><SPLicenseBlock xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo Id="_ee588d09-4100-b519-9860-d4c12cc4ea67"><KeyValue><RSAKeyValue><Modulus>*</Modulus><Exponent>*</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License><HWDeviceID>*</HWDeviceID><GlobalDeviceID>*</GlobalDeviceID><DeviceTpmKeyState>*</DeviceTpmKeyState><ServerInfo ServerTime="2021-01-25T07:37:39Z">BY1PPF68D120E9B 2021.01.18.14.24.24</ServerInfo></ps:DeviceUpdatePropertiesResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 185 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 3024 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:37:39 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2021-01-25T07:37:38Z</wsu:Created><wsu:Expires>2021-01-25T07:42:38Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#DeviceInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><DeviceUpdatePropertiesRequest xmlns="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" version="2.0"><HardwareChangeState>*</HardwareChangeState><DeviceInfo xmlns="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" Id="DeviceInfo"><Component name="4128">*</Component><Component name="4130">*</Component><Component name="4128">*</Component><Component name="4130">*</Component><Component name="4112">*</Component><Component name="4113">*</Component><Component name="4097">*</Component><Component name="4098">*</Component><Component name="4099">*</Component><Component name="4100">*</Component><Component name="4101">*</Component><Component name="4102">*</Component><Component name="8195">*</Component><Component name="8196">*</Component><Component name="4144">*</Component><Component name="4145">*</Component></DeviceInfo></DeviceUpdatePropertiesRequest></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 184 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 3024 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:37:39 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: www.microsoft.com
Created: 2021-01-25T07:37:31.000Z
Expires: 2021-01-26T07:37:31.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 183 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-19 | 1/25/2021 7:37:32 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2021-01-25T07:37:31Z</wsu:Created><wsu:Expires>2021-01-25T07:42:31Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="RMJlzJeSumI8nVOW3q6aoAZ3iPc="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="RMJlzJeSumI8nVOW3q6aoAZ3iPc="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 182 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-19 | 1/25/2021 7:37:32 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2021-01-25T07:37:29Z</wsu:Created><wsu:Expires>2021-01-25T07:42:29Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>www.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="mbi_ssl"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 181 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-19 | 1/25/2021 7:37:30 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2021-01-25T07:37:30.000Z
Expires: 2021-04-25T07:37:30.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 180 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-19 | 1/25/2021 7:37:30 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2021-01-25T07:37:30Z</wsu:Created><wsu:Expires>2021-01-25T07:42:30Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2021-01-25T07:37:30Z" BuildVersion="16.0.28910.1">BY1PPF1AEAA7DAC 2021.01.18.14.24.24</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2021-01-25T07:37:30Z</wsu:Created><wsu:Expires>2021-04-25T07:37:30Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 179 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-19 | 1/25/2021 7:37:30 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">*</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2021-01-25T07:37:29Z</wsu:Created><wsu:Expires>2021-01-25T07:42:29Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 178 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-19 | 1/25/2021 7:37:30 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 177 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 3744 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:37:30 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service stopped
Details: The service has stopped.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 176 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2480 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:37:16 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: https://vortex-win.data.microsoft.com
Created: 2021-01-25T07:34:16.000Z
Expires: 2021-02-01T07:34:16.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 175 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:16 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2021-01-25T07:34:16Z</wsu:Created><wsu:Expires>2021-01-25T07:39:16Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="2aYoPu+k6P9SOEOAhvFs0V78JeM="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="2aYoPu+k6P9SOEOAhvFs0V78JeM="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 174 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:16 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2021-01-25T07:34:15Z</wsu:Created><wsu:Expires>2021-01-25T07:39:15Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://vortex-win.data.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="NFS_1wk_compact_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 173 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:16 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function GetWindowsDeviceId encountered unexpected error code (The system cannot find the file specified.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 172 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:16 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2021-01-25T07:34:16.000Z
Expires: 2021-04-25T07:34:16.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 171 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:16 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2021-01-25T07:34:16Z</wsu:Created><wsu:Expires>2021-01-25T07:39:16Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2021-01-25T07:34:16Z" BuildVersion="16.0.28910.1">BY1PPF33146FE9F 2021.01.18.14.24.24</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2021-01-25T07:34:16Z</wsu:Created><wsu:Expires>2021-04-25T07:34:16Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 170 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:16 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2021-01-25T07:34:14Z</wsu:Created><wsu:Expires>2021-01-25T07:39:14Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 169 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:15 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function GetWindowsDeviceId encountered unexpected error code (The system cannot find the file specified.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 168 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:15 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function CPPCRLRequest::SetApplicableCookies encountered unexpected error code (There are no remote procedure calls active on this thread.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 167 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2988 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:15 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2021-01-25T07:34:15.000Z
Expires: 2021-04-25T07:34:15.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 166 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2988 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:15 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2021-01-25T07:34:15Z</wsu:Created><wsu:Expires>2021-01-25T07:39:15Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2021-01-25T07:34:15Z" BuildVersion="16.0.28910.1">SJ1PPF25EE3CB89 2021.01.18.14.24.24</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2021-01-25T07:34:15Z</wsu:Created><wsu:Expires>2021-04-25T07:34:15Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 165 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2988 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:15 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2021-01-25T07:34:14Z</wsu:Created><wsu:Expires>2021-01-25T07:39:14Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 164 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2988 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:15 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function GetWindowsDeviceId encountered unexpected error code (The system cannot find the file specified.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 163 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2988 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:15 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2021-01-25T07:34:15.000Z
Expires: 2021-04-25T07:34:15.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 162 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:15 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2021-01-25T07:34:15Z</wsu:Created><wsu:Expires>2021-01-25T07:39:15Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2021-01-25T07:34:15Z" BuildVersion="16.0.28910.1">SJ1PPF377DFA148 2021.01.18.14.24.24</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2021-01-25T07:34:15Z</wsu:Created><wsu:Expires>2021-04-25T07:34:15Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 161 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:15 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2021-01-25T07:34:14Z</wsu:Created><wsu:Expires>2021-01-25T07:39:14Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 160 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:15 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function GetWindowsDeviceId encountered unexpected error code (The system cannot find the file specified.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 159 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:15 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <DeviceAddResponse Success="true"><success>*</success><puid>*</puid><DeviceTpmKeyState>*</DeviceTpmKeyState><License ContentID="3252b20c-d425-4711-8cc5-b2f53c830b76" ID="afa5ccb3-0ba4-4fd5-a0d2-12c0aa0aef8f" LicenseID="3252b20c-d425-4711-8cc5-b2f53c830b76" Version="2" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><DeviceID xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</DeviceID></Binding><LicenseInfo Type="Device" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><IssuedDate xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</IssuedDate></LicenseInfo><SPLicenseBlock xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo Id="_ee588d09-4100-b519-9860-d4c12cc4ea67"><KeyValue><RSAKeyValue><Modulus>*</Modulus><Exponent>*</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License><HWDeviceID>*</HWDeviceID><GlobalDeviceID>*</GlobalDeviceID><DeviceTpmKeyState>*</DeviceTpmKeyState><ServerInfo ServerTime="2021-01-25T07:34:15Z">BY1PPF179AEF540 2021.01.18.14.24.24</ServerInfo></DeviceAddResponse> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 158 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:15 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <DeviceAddRequest><ClientInfo name="IDCRL" version="1.0"/><Authentication><Membername>*</Membername><Password>*</Password></Authentication><DeviceInfo Id="DeviceInfo"><Component name="4128">*</Component><Component name="4130">*</Component><Component name="4128">*</Component><Component name="4130">*</Component><Component name="4112">*</Component><Component name="4113">*</Component><Component name="4097">*</Component><Component name="4098">*</Component><Component name="4099">*</Component><Component name="4100">*</Component><Component name="4101">*</Component><Component name="4102">*</Component><Component name="8195">*</Component><Component name="8196">*</Component><Component name="4144">*</Component><Component name="4145">*</Component><TPMInfo><KeyValue><RSAKeyValue><Modulus>*</Modulus><Exponent>*</Exponent></RSAKeyValue><KeyType>*</KeyType></KeyValue></TPMInfo></DeviceInfo></DeviceAddRequest> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 157 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:12 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
RPC call to function WLIDCleanupIdentity returned the following error code: 0x80070057. | 6113 | 0 | | 2 | 0 | 0 | 4611686018431584274 | 156 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 2220 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:03 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 155 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 584 | 1976 | n-h2-771362-3 | S-1-5-18 | 1/25/2021 7:34:03 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::RetrieveDeviceData encountered unexpected error code (The device is not ready for use.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 154 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2144 | 2468 | WIN-5T344G8GM1H | S-1-5-18 | 1/25/2021 7:32:43 AM | 2d36c5de-f2ec-0001-fcc5-362decf2d601 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::SetupIdentityHandle encountered unexpected error code (Unknown HResult Error code: 0x8004805f). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 153 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2144 | 2468 | WIN-5T344G8GM1H | S-1-5-18 | 1/25/2021 7:32:43 AM | 2d36c5de-f2ec-0001-fcc5-362decf2d601 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
RPC call to function WLIDCreateContext returned the following error code: 0x8004805F. | 6113 | 0 | | 2 | 0 | 0 | 4611686018431584274 | 152 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 524 | 1676 | WIN-5T344G8GM1H | S-1-5-18 | 1/25/2021 7:32:43 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::RetrieveDeviceData encountered unexpected error code (The device is not ready for use.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 151 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2144 | 2752 | WIN-5T344G8GM1H | S-1-5-18 | 1/25/2021 7:32:43 AM | 2d36c5de-f2ec-0001-fbc5-362decf2d601 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::SetupIdentityHandle encountered unexpected error code (Unknown HResult Error code: 0x8004805f). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 150 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2144 | 2752 | WIN-5T344G8GM1H | S-1-5-18 | 1/25/2021 7:32:43 AM | 2d36c5de-f2ec-0001-fbc5-362decf2d601 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
RPC call to function WLIDCreateContext returned the following error code: 0x8004805F. | 6113 | 0 | | 2 | 0 | 0 | 4611686018431584274 | 149 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 524 | 1676 | WIN-5T344G8GM1H | S-1-5-18 | 1/25/2021 7:32:43 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::RetrieveDeviceData encountered unexpected error code (The device is not ready for use.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 148 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2144 | 2472 | WIN-5T344G8GM1H | S-1-5-18 | 1/25/2021 7:32:42 AM | 2d36c5de-f2ec-0001-f5c5-362decf2d601 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::SetupIdentityHandle encountered unexpected error code (Unknown HResult Error code: 0x8004805f). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 147 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2144 | 2472 | WIN-5T344G8GM1H | S-1-5-18 | 1/25/2021 7:32:42 AM | 2d36c5de-f2ec-0001-f5c5-362decf2d601 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
RPC call to function WLIDCreateContext returned the following error code: 0x8004805F. | 6113 | 0 | | 2 | 0 | 0 | 4611686018431584274 | 146 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 524 | 872 | WIN-5T344G8GM1H | S-1-5-18 | 1/25/2021 7:32:42 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 145 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 524 | 1584 | WIN-5T344G8GM1H | S-1-5-18 | 1/25/2021 7:32:42 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service stopped
Details: The service has stopped.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 144 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 1180 | 5024 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 9:00:50 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: https://watson.telemetry.microsoft.com
Created: 2018-01-19T08:57:48.000Z
Expires: 2018-01-20T08:57:48.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 143 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 1180 | 1284 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:57:50 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:57:48Z</wsu:Created><wsu:Expires>2018-01-19T09:02:48Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="QNWpr3CRcLXaZAhDusRyD1TpGXQ="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="QNWpr3CRcLXaZAhDusRyD1TpGXQ="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 142 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 1180 | 1284 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:57:50 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:57:48Z</wsu:Created><wsu:Expires>2018-01-19T09:02:48Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://watson.telemetry.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 141 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 1180 | 1284 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:57:49 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 140 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 1180 | 2508 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:57:49 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: https://watson.telemetry.microsoft.com
Created: 2018-01-19T08:54:35.000Z
Expires: 2018-01-20T08:54:35.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 139 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 1192 | 2728 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/19/2018 8:54:37 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:54:35Z</wsu:Created><wsu:Expires>2018-01-19T08:59:35Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="kgOiIzKd1zz/61BiacBK3DRVykU="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="kgOiIzKd1zz/61BiacBK3DRVykU="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 138 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 1192 | 2728 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/19/2018 8:54:37 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:54:34Z</wsu:Created><wsu:Expires>2018-01-19T08:59:34Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://watson.telemetry.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 137 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 1192 | 2728 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/19/2018 8:54:35 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 136 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 1192 | 2652 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:54:35 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service stopped
Details: The service has stopped.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 135 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 3080 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:38:30 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: 474a-87ad-2f9a87615fa3-dc1-tip.cloudapp.net
Created: 2018-01-19T08:33:59.000Z
Expires: 2018-01-20T08:33:59.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 134 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 4092 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:34:01 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:33:59Z</wsu:Created><wsu:Expires>2018-01-19T08:38:59Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="f3DCT6JU6nvEwyG3sqYQ783zqU8="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="f3DCT6JU6nvEwyG3sqYQ783zqU8="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 133 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 4092 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:34:01 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: 474a-87ad-2f9a87615fa3-dc1-tip.cloudapp.net
Created: 2018-01-19T08:33:59.000Z
Expires: 2018-01-20T08:33:59.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 132 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 1884 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:34:01 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:33:59Z</wsu:Created><wsu:Expires>2018-01-19T08:38:59Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="f3DCT6JU6nvEwyG3sqYQ783zqU8="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="f3DCT6JU6nvEwyG3sqYQ783zqU8="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 131 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 1884 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:34:01 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:33:58Z</wsu:Created><wsu:Expires>2018-01-19T08:38:58Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>474a-87ad-2f9a87615fa3-dc1-tip.cloudapp.net</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 130 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 4092 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:34:00 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:33:58Z</wsu:Created><wsu:Expires>2018-01-19T08:38:58Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>474a-87ad-2f9a87615fa3-dc1-tip.cloudapp.net</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 129 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 1884 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:34:00 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2018-01-19T08:33:58.000Z
Expires: 2018-04-19T08:33:58.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 128 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 4092 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:34:00 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:33:58Z</wsu:Created><wsu:Expires>2018-01-19T08:38:58Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-19T08:33:58Z">BL2IDSLGN3B047 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2018-01-19T08:33:58Z</wsu:Created><wsu:Expires>2018-04-19T08:33:58Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 127 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 4092 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:34:00 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: www.microsoft.com
Created: 2018-01-19T08:33:58.000Z
Expires: 2018-01-20T08:33:58.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 126 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2404 | WIN-5T344G8GM1H | S-1-5-19 | 1/19/2018 8:34:00 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:33:58Z</wsu:Created><wsu:Expires>2018-01-19T08:38:58Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="c9jQFVYSvjQwcrdFJhAVme0B//A="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="c9jQFVYSvjQwcrdFJhAVme0B//A="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 125 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2404 | WIN-5T344G8GM1H | S-1-5-19 | 1/19/2018 8:34:00 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">*</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:33:57Z</wsu:Created><wsu:Expires>2018-01-19T08:38:57Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 124 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 4092 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:34:00 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2018-01-19T08:33:57.000Z
Expires: 2018-04-19T08:33:57.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 123 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 4092 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:34:00 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:33:57Z</wsu:Created><wsu:Expires>2018-01-19T08:38:57Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-19T08:33:57Z">BL2IDSLGN3B003 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2018-01-19T08:33:57Z</wsu:Created><wsu:Expires>2018-04-19T08:33:57Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 122 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 4092 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:34:00 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:33:57Z</wsu:Created><wsu:Expires>2018-01-19T08:38:57Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>www.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="mbi_ssl"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 121 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2404 | WIN-5T344G8GM1H | S-1-5-19 | 1/19/2018 8:33:59 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2018-01-19T08:33:57.000Z
Expires: 2018-04-19T08:33:57.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 120 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2404 | WIN-5T344G8GM1H | S-1-5-19 | 1/19/2018 8:33:59 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:33:57Z</wsu:Created><wsu:Expires>2018-01-19T08:38:57Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-19T08:33:57Z">BL2IDSLGN3B031 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2018-01-19T08:33:57Z</wsu:Created><wsu:Expires>2018-04-19T08:33:57Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 119 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2404 | WIN-5T344G8GM1H | S-1-5-19 | 1/19/2018 8:33:59 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">*</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:33:56Z</wsu:Created><wsu:Expires>2018-01-19T08:38:56Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 118 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 4092 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:33:59 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">*</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:33:56Z</wsu:Created><wsu:Expires>2018-01-19T08:38:56Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 117 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2404 | WIN-5T344G8GM1H | S-1-5-19 | 1/19/2018 8:33:59 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2018-01-19T08:33:56.000Z
Expires: 2018-04-19T08:33:56.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 116 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2404 | WIN-5T344G8GM1H | S-1-5-19 | 1/19/2018 8:33:59 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:33:56Z</wsu:Created><wsu:Expires>2018-01-19T08:38:56Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-19T08:33:56Z">BL2IDSLGN3B080 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2018-01-19T08:33:56Z</wsu:Created><wsu:Expires>2018-04-19T08:33:56Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 115 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2404 | WIN-5T344G8GM1H | S-1-5-19 | 1/19/2018 8:33:59 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SOAP Request of type DeviceAuth for user CID 'NULL' in production environment received the following error code from the Microsoft Account server: 0x80043514. | 6114 | 0 | | 2 | 0 | 0 | 4611686018429487122 | 114 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 4092 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:33:59 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:authstate>0x80048800</psf:authstate><psf:reqstatus>0x80048821</psf:reqstatus><psf:inlineauthurl>*</psf:inlineauthurl><psf:inlineendauthurl>*</psf:inlineendauthurl><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-19T08:33:56Z">BL2IDSLGN3B057 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><S:Fault><S:Code><S:Value>S:Sender</S:Value><S:Subcode><S:Value>wst:FailedAuthentication</S:Value></S:Subcode></S:Code><S:Reason><S:Text xml:lang="en-US">Authentication Failure</S:Text></S:Reason><S:Detail><psf:error><psf:value>0x80048821</psf:value><psf:internalerror><psf:code>0x80043514</psf:code><psf:text>The device exists with strong creds.
</psf:text></psf:internalerror></psf:error></S:Detail></S:Fault></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 113 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 4092 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:33:59 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">*</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:33:56Z</wsu:Created><wsu:Expires>2018-01-19T08:38:56Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 112 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 4092 | WIN-5T344G8GM1H | S-1-5-20 | 1/19/2018 8:33:58 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">*</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:33:56Z</wsu:Created><wsu:Expires>2018-01-19T08:38:56Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 111 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2404 | WIN-5T344G8GM1H | S-1-5-19 | 1/19/2018 8:33:58 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
SOAP Request of type DeviceAuth for user CID 'NULL' in production environment received the following error code from the Microsoft Account server: 0x80043514. | 6114 | 0 | | 2 | 0 | 0 | 4611686018429487122 | 110 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2404 | WIN-5T344G8GM1H | S-1-5-19 | 1/19/2018 8:33:58 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:authstate>0x80048800</psf:authstate><psf:reqstatus>0x80048821</psf:reqstatus><psf:inlineauthurl>*</psf:inlineauthurl><psf:inlineendauthurl>*</psf:inlineendauthurl><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-19T08:33:56Z">BL2IDSLGN3B044 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><S:Fault><S:Code><S:Value>S:Sender</S:Value><S:Subcode><S:Value>wst:FailedAuthentication</S:Value></S:Subcode></S:Code><S:Reason><S:Text xml:lang="en-US">Authentication Failure</S:Text></S:Reason><S:Detail><psf:error><psf:value>0x80048821</psf:value><psf:internalerror><psf:code>0x80043514</psf:code><psf:text>The device exists with strong creds.
</psf:text></psf:internalerror></psf:error></S:Detail></S:Fault></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 109 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2404 | WIN-5T344G8GM1H | S-1-5-19 | 1/19/2018 8:33:58 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">*</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:33:56Z</wsu:Created><wsu:Expires>2018-01-19T08:38:56Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 108 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2404 | WIN-5T344G8GM1H | S-1-5-19 | 1/19/2018 8:33:57 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 107 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 5076 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:33:57 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service stopped
Details: The service has stopped.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 106 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 3332 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:31:59 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: https://settings-win.data.microsoft.com
Created: 2018-01-19T08:28:57.000Z
Expires: 2018-01-20T08:28:57.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 105 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 5116 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:28:59 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:28:57Z</wsu:Created><wsu:Expires>2018-01-19T08:33:57Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="QNWpr3CRcLXaZAhDusRyD1TpGXQ="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="QNWpr3CRcLXaZAhDusRyD1TpGXQ="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 104 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 5116 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:28:59 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:28:56Z</wsu:Created><wsu:Expires>2018-01-19T08:33:56Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://settings-win.data.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 103 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 5116 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:28:58 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: https://settings-win.data.microsoft.com/settings/v2.0/
Created: 2018-01-19T08:28:06.000Z
Expires: 2018-01-26T08:28:06.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 102 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2928 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:28:08 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:28:06Z</wsu:Created><wsu:Expires>2018-01-19T08:33:06Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="QNWpr3CRcLXaZAhDusRyD1TpGXQ="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="QNWpr3CRcLXaZAhDusRyD1TpGXQ="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 101 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2928 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:28:08 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:28:05Z</wsu:Created><wsu:Expires>2018-01-19T08:33:05Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://settings-win.data.microsoft.com/settings/v2.0/</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="NFS_1wk_compact_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 100 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2928 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:28:07 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: wns.windows.com
Created: 2018-01-19T08:25:09.000Z
Expires: 2018-01-20T08:25:09.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 99 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2316 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:25:11 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:25:09Z</wsu:Created><wsu:Expires>2018-01-19T08:30:09Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="QNWpr3CRcLXaZAhDusRyD1TpGXQ="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="QNWpr3CRcLXaZAhDusRyD1TpGXQ="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 98 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2316 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:25:11 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:25:08Z</wsu:Created><wsu:Expires>2018-01-19T08:30:08Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>wns.windows.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 97 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2316 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:25:10 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: wns.windows.com
Created: 2018-01-19T08:24:08.000Z
Expires: 2018-01-20T08:24:08.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 96 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/19/2018 8:24:10 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:24:08Z</wsu:Created><wsu:Expires>2018-01-19T08:29:08Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="kgOiIzKd1zz/61BiacBK3DRVykU="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="kgOiIzKd1zz/61BiacBK3DRVykU="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 95 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/19/2018 8:24:10 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:24:07Z</wsu:Created><wsu:Expires>2018-01-19T08:29:07Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>wns.windows.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 94 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/19/2018 8:24:09 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::RetrieveDeviceData encountered unexpected error code (Unknown HResult Error code: 0x80048505). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 93 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2940 | 3296 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/19/2018 8:24:09 AM | 9a81cb05-910f-0000-9fcb-819a0f91d301 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
RPC call to function WLIDAcquireTokens returned the following error code: 0x80048505. | 6113 | 0 | | 2 | 0 | 0 | 4611686018431584274 | 92 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:24:09 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2018-01-19T08:24:07.000Z
Expires: 2018-04-19T08:24:07.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 91 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/19/2018 8:24:09 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:24:07Z</wsu:Created><wsu:Expires>2018-01-19T08:29:07Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-19T08:24:07Z">BL2IDSLGN2B023 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2018-01-19T08:24:07Z</wsu:Created><wsu:Expires>2018-04-19T08:24:07Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 90 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/19/2018 8:24:09 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">*</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:24:06Z</wsu:Created><wsu:Expires>2018-01-19T08:29:06Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 89 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/19/2018 8:24:08 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2018-01-19T08:24:06.000Z
Expires: 2018-04-19T08:24:04.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 88 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/19/2018 8:24:08 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:24:06Z</wsu:Created><wsu:Expires>2018-01-19T08:29:06Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-19T08:24:06Z">BL2IDSLGN2A043 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2018-01-19T08:24:06Z</wsu:Created><wsu:Expires>2018-04-19T08:24:04Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 87 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/19/2018 8:24:08 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: https://vortex-win.data.microsoft.com
Created: 2018-01-19T08:24:04.000Z
Expires: 2018-01-26T08:24:04.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 86 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2904 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:24:06 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:24:04Z</wsu:Created><wsu:Expires>2018-01-19T08:29:04Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="QNWpr3CRcLXaZAhDusRyD1TpGXQ="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="QNWpr3CRcLXaZAhDusRyD1TpGXQ="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 85 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2904 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:24:06 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:24:03Z</wsu:Created><wsu:Expires>2018-01-19T08:29:03Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://vortex-win.data.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="NFS_1wk_compact_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 84 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2904 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:24:05 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">*</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:24:03Z</wsu:Created><wsu:Expires>2018-01-19T08:29:03Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 83 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/19/2018 8:24:05 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2018-01-19T08:24:03.000Z
Expires: 2018-04-19T08:24:03.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 82 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:24:05 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-19T08:24:03Z</wsu:Created><wsu:Expires>2018-01-19T08:29:03Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-19T08:24:03Z">BL2IDSLGN2B014 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2018-01-19T08:24:03Z</wsu:Created><wsu:Expires>2018-04-19T08:24:03Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 81 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:24:05 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString><ps:ClientCapabilities>*</ps:ClientCapabilities></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-19T08:24:02Z</wsu:Created><wsu:Expires>2018-01-19T08:29:02Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 80 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:24:04 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <DeviceAddResponse Success="true"><success>*</success><puid>*</puid><DeviceTpmKeyState>*</DeviceTpmKeyState><License ContentID="3252b20c-d425-4711-8cc5-b2f53c830b76" ID="d6d6b1dc-47bf-4689-b89c-c9760d165812" LicenseID="3252b20c-d425-4711-8cc5-b2f53c830b76" Version="2" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><DeviceID xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</DeviceID></Binding><LicenseInfo Type="Device" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><IssuedDate xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</IssuedDate></LicenseInfo><SPLicenseBlock xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo Id="_ee588d09-4100-b519-9860-d4c12cc4ea67"><KeyValue><RSAKeyValue><Modulus>*</Modulus><Exponent>*</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License><HWDeviceID>*</HWDeviceID><GlobalDeviceID>*</GlobalDeviceID><DeviceTpmKeyState>*</DeviceTpmKeyState><ServerInfo ServerTime="2018-01-19T08:24:02Z">BL2IDSLGN2B020 2018.01.02.12.52.34</ServerInfo></DeviceAddResponse> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 79 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:24:04 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <DeviceAddRequest><ClientInfo name="IDCRL" version="1.0"/><Authentication><Membername>*</Membername><Password>*</Password></Authentication><OldMembername>*</OldMembername><ReprovisionReason>*</ReprovisionReason><DeviceInfo Id="DeviceInfo"><Component name="4128">*</Component><Component name="4130">*</Component><Component name="4112">*</Component><Component name="4113">*</Component><Component name="4097">*</Component><Component name="4098">*</Component><Component name="4099">*</Component><Component name="4100">*</Component><Component name="4101">*</Component><Component name="4102">*</Component><Component name="8195">*</Component><Component name="8196">*</Component><Component name="4144">*</Component><Component name="4145">*</Component><TPMInfo><KeyValue><RSAKeyValue><Modulus>*</Modulus><Exponent>*</Exponent></RSAKeyValue><KeyType>*</KeyType></KeyValue></TPMInfo></DeviceInfo></DeviceAddRequest> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 78 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2000 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:24:02 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 77 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 964 | 2980 | WIN-5T344G8GM1H | S-1-5-18 | 1/19/2018 8:24:02 AM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service stopped
Details: The service has stopped.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 76 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3396 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:38:08 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: 474a-87ad-2f9a87615fa3-dc1-tip.cloudapp.net
Created: 2018-01-16T17:35:06.000Z
Expires: 2018-01-17T17:35:06.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 75 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2748 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/16/2018 5:35:08 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:35:06Z</wsu:Created><wsu:Expires>2018-01-16T17:40:06Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="6kVqCZNo+7rfK3nINcJVOs160Ks="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="6kVqCZNo+7rfK3nINcJVOs160Ks="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 74 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2748 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/16/2018 5:35:08 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:35:07Z</wsu:Created><wsu:Expires>2018-01-16T17:40:07Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>474a-87ad-2f9a87615fa3-dc1-tip.cloudapp.net</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 73 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2748 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/16/2018 5:35:08 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 72 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 1564 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:35:08 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service stopped
Details: The service has stopped.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 71 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2348 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:35:01 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: https://watson.telemetry.microsoft.com
Created: 2018-01-16T17:29:00.000Z
Expires: 2018-01-17T17:29:00.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 70 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2368 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/16/2018 5:29:02 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:29:00Z</wsu:Created><wsu:Expires>2018-01-16T17:34:00Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="6kVqCZNo+7rfK3nINcJVOs160Ks="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="6kVqCZNo+7rfK3nINcJVOs160Ks="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 69 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2368 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/16/2018 5:29:02 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:29:01Z</wsu:Created><wsu:Expires>2018-01-16T17:34:01Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://watson.telemetry.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 68 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2368 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/16/2018 5:29:02 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 67 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2748 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:29:02 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service stopped
Details: The service has stopped.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 66 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2916 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:22:59 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: wns.windows.com
Created: 2018-01-16T17:17:01.000Z
Expires: 2018-01-17T17:17:01.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 65 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 972 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:17:03 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:17:01Z</wsu:Created><wsu:Expires>2018-01-16T17:22:01Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="lw3ryx8woY6fFDVuzFHYgjH81ss="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="lw3ryx8woY6fFDVuzFHYgjH81ss="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 64 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 972 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:17:03 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:17:00Z</wsu:Created><wsu:Expires>2018-01-16T17:22:00Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>wns.windows.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 63 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 972 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:17:02 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: https://settings-win.data.microsoft.com/settings/v2.0/
Created: 2018-01-16T17:16:58.000Z
Expires: 2018-01-23T17:16:58.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 62 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3620 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:17:00 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:16:58Z</wsu:Created><wsu:Expires>2018-01-16T17:21:58Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="lw3ryx8woY6fFDVuzFHYgjH81ss="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="lw3ryx8woY6fFDVuzFHYgjH81ss="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 61 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3620 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:17:00 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:16:58Z</wsu:Created><wsu:Expires>2018-01-16T17:21:58Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://settings-win.data.microsoft.com/settings/v2.0/</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="NFS_1wk_compact_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 60 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3620 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:16:59 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 59 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2368 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:16:59 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service stopped
Details: The service has stopped.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 58 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 5392 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:09:26 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: https://watson.telemetry.microsoft.com
Created: 2018-01-16T17:06:25.000Z
Expires: 2018-01-17T17:06:25.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 57 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2480 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:06:26 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:06:25Z</wsu:Created><wsu:Expires>2018-01-16T17:11:25Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="lw3ryx8woY6fFDVuzFHYgjH81ss="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="lw3ryx8woY6fFDVuzFHYgjH81ss="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 56 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2480 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:06:26 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:06:25Z</wsu:Created><wsu:Expires>2018-01-16T17:11:25Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://watson.telemetry.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 55 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2480 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:06:26 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 54 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 1532 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:06:26 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service stopped
Details: The service has stopped.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 53 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3288 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:06:01 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: 474a-87ad-2f9a87615fa3-dc1-tip.cloudapp.net
Created: 2018-01-16T17:02:59.000Z
Expires: 2018-01-17T17:02:59.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 52 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2872 | WIN-5T344G8GM1H | S-1-5-20 | 1/16/2018 5:03:01 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:02:59Z</wsu:Created><wsu:Expires>2018-01-16T17:07:59Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="ECSdXgku03IH7qwLBG/whWtOhwA="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="ECSdXgku03IH7qwLBG/whWtOhwA="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 51 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2872 | WIN-5T344G8GM1H | S-1-5-20 | 1/16/2018 5:03:01 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:02:58Z</wsu:Created><wsu:Expires>2018-01-16T17:07:58Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>474a-87ad-2f9a87615fa3-dc1-tip.cloudapp.net</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 50 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2872 | WIN-5T344G8GM1H | S-1-5-20 | 1/16/2018 5:03:00 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2018-01-16T17:02:58.000Z
Expires: 2018-04-16T17:02:58.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 49 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2872 | WIN-5T344G8GM1H | S-1-5-20 | 1/16/2018 5:03:00 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:02:58Z</wsu:Created><wsu:Expires>2018-01-16T17:07:58Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-16T17:02:58Z">BL2IDSLGN1E041 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2018-01-16T17:02:58Z</wsu:Created><wsu:Expires>2018-04-16T17:02:58Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 48 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2872 | WIN-5T344G8GM1H | S-1-5-20 | 1/16/2018 5:03:00 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">*</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:02:57Z</wsu:Created><wsu:Expires>2018-01-16T17:07:57Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 47 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2872 | WIN-5T344G8GM1H | S-1-5-20 | 1/16/2018 5:02:59 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header></S:Header><S:Body><ps:DeviceUpdatePropertiesResponse Success="true"><DeviceTpmKeyState>*</DeviceTpmKeyState><License ContentID="3252b20c-d425-4711-8cc5-b2f53c830b76" ID="50822f6d-b853-4623-9c1f-7ba8af45b73f" LicenseID="3252b20c-d425-4711-8cc5-b2f53c830b76" Version="2" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><DeviceID xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</DeviceID></Binding><LicenseInfo Type="Device" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><IssuedDate xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</IssuedDate></LicenseInfo><SPLicenseBlock xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo Id="_ee588d09-4100-b519-9860-d4c12cc4ea67"><KeyValue><RSAKeyValue><Modulus>*</Modulus><Exponent>*</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License><HWDeviceID>*</HWDeviceID><GlobalDeviceID>*</GlobalDeviceID><DeviceTpmKeyState>*</DeviceTpmKeyState><ServerInfo ServerTime="2018-01-16T17:02:56Z">BL2IDSLGN2A022 2018.01.02.12.52.34</ServerInfo></ps:DeviceUpdatePropertiesResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 46 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2888 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:58 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:02:55Z</wsu:Created><wsu:Expires>2018-01-16T17:07:55Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#DeviceInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><DeviceUpdatePropertiesRequest xmlns="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" version="2.0"><HardwareChangeState>*</HardwareChangeState><DeviceInfo xmlns="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" Id="DeviceInfo"><Component name="4128">*</Component><Component name="4130">*</Component><Component name="4112">*</Component><Component name="4113">*</Component><Component name="4097">*</Component><Component name="4098">*</Component><Component name="4099">*</Component><Component name="4100">*</Component><Component name="4101">*</Component><Component name="4102">*</Component><Component name="8195">*</Component><Component name="8196">*</Component><Component name="4144">*</Component><Component name="4145">*</Component></DeviceInfo></DeviceUpdatePropertiesRequest></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 45 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2888 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:57 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: www.microsoft.com
Created: 2018-01-16T17:02:50.000Z
Expires: 2018-01-17T17:02:50.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 44 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3984 | WIN-5T344G8GM1H | S-1-5-19 | 1/16/2018 5:02:52 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:02:50Z</wsu:Created><wsu:Expires>2018-01-16T17:07:50Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="pZvimM7z1FDB1IpGN153pQv//wE="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="pZvimM7z1FDB1IpGN153pQv//wE="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 43 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3984 | WIN-5T344G8GM1H | S-1-5-19 | 1/16/2018 5:02:52 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:02:49Z</wsu:Created><wsu:Expires>2018-01-16T17:07:49Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>www.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="mbi_ssl"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 42 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3984 | WIN-5T344G8GM1H | S-1-5-19 | 1/16/2018 5:02:51 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2018-01-16T17:02:49.000Z
Expires: 2018-04-16T17:02:49.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 41 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3984 | WIN-5T344G8GM1H | S-1-5-19 | 1/16/2018 5:02:51 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:02:49Z</wsu:Created><wsu:Expires>2018-01-16T17:07:49Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-16T17:02:49Z">BL2IDSLGN1G018 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2018-01-16T17:02:49Z</wsu:Created><wsu:Expires>2018-04-16T17:02:49Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 40 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3984 | WIN-5T344G8GM1H | S-1-5-19 | 1/16/2018 5:02:51 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">*</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:02:49Z</wsu:Created><wsu:Expires>2018-01-16T17:07:49Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 39 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3984 | WIN-5T344G8GM1H | S-1-5-19 | 1/16/2018 5:02:50 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: wns.windows.com
Created: 2018-01-16T17:02:22.000Z
Expires: 2018-01-17T17:02:22.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 38 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2352 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/16/2018 5:02:23 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:02:22Z</wsu:Created><wsu:Expires>2018-01-16T17:07:22Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="6kVqCZNo+7rfK3nINcJVOs160Ks="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="6kVqCZNo+7rfK3nINcJVOs160Ks="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 37 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2352 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/16/2018 5:02:23 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:02:21Z</wsu:Created><wsu:Expires>2018-01-16T17:07:21Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>wns.windows.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 36 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2352 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/16/2018 5:02:22 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2018-01-16T17:02:21.000Z
Expires: 2018-04-16T17:02:21.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 35 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2872 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/16/2018 5:02:22 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:02:21Z</wsu:Created><wsu:Expires>2018-01-16T17:07:21Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-16T17:02:21Z">BL2IDSLGN1G020 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2018-01-16T17:02:21Z</wsu:Created><wsu:Expires>2018-04-16T17:02:21Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 34 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2872 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/16/2018 5:02:22 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: https://vortex-win.data.microsoft.com
Created: 2018-01-16T17:02:21.000Z
Expires: 2018-01-23T17:02:21.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 33 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2016 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:22 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:02:21Z</wsu:Created><wsu:Expires>2018-01-16T17:07:21Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="lw3ryx8woY6fFDVuzFHYgjH81ss="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="lw3ryx8woY6fFDVuzFHYgjH81ss="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 32 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2016 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:22 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: https://settings-win.data.microsoft.com
Created: 2018-01-16T17:02:21.000Z
Expires: 2018-01-17T17:02:21.000Z
TokenType: urn:passport:compact
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 31 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3944 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:22 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:02:21Z</wsu:Created><wsu:Expires>2018-01-16T17:07:21Z</wsu:Expires></wsu:Timestamp><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="lw3ryx8woY6fFDVuzFHYgjH81ss="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wssc:DerivedKeyToken wsu:Id="EncKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:SecurityTokenReference><wsse:Reference URI="lw3ryx8woY6fFDVuzFHYgjH81ss="></wsse:Reference></wsse:SecurityTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#EncPsf"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Body"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#To"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Action"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#TS"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo></Signature><e:ReferenceList xmlns:e="http://www.w3.org/2001/04/xmlenc#"><e:DataReference URI="#RSTR"/><e:DataReference URI="#EncPsf"/></e:ReferenceList></wsse:Security><psf:EncryptedPP><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="EncPsf" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></psf:EncryptedPP></S:Header><S:Body wsu:Id="Body"><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="RSTR" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"></EncryptionMethod><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><wsse:SecurityTokenReference><wsse:Reference URI="#EncKey"></wsse:Reference></wsse:SecurityTokenReference></KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 30 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3944 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:22 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:02:20Z</wsu:Created><wsu:Expires>2018-01-16T17:07:20Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://settings-win.data.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="MBI_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 29 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 3944 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:21 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsse:BinarySecurityToken ValueType="urn:liveid:device" id="DeviceDAToken">*</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:02:20Z</wsu:Created><wsu:Expires>2018-01-16T17:07:20Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 28 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2872 | WIN-5T344G8GM1H | S-1-5-21-416071247-492812682-1642729393-500 | 1/16/2018 5:02:21 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData><wssc:DerivedKeyToken wsu:Id="SignKey" Algorithm="urn:liveid:SP800108_CTR_HMAC_SHA256_DOUBLEDERIVED"><wsse:RequestedTokenReference><wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/XX/oasis-2004XX-wss-saml-token-profile-1.0#SAMLAssertionID"/><wsse:Reference URI=""/></wsse:RequestedTokenReference><wssc:Nonce>*</wssc:Nonce></wssc:DerivedKeyToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:02:20Z</wsu:Created><wsu:Expires>2018-01-16T17:07:20Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#hmac-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo><wsse:SecurityTokenReference><wsse:Reference URI="#SignKey"/></wsse:SecurityTokenReference></KeyInfo></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>https://vortex-win.data.microsoft.com</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wsp:PolicyReference URI="NFS_1wk_compact_SSL"></wsp:PolicyReference></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 27 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2016 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:21 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function CPPCRLRequest::SetApplicableCookies encountered unexpected error code (There are no remote procedure calls active on this thread.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 26 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 960 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:11 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2018-01-16T17:02:10.000Z
Expires: 2018-04-16T17:02:10.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 25 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 960 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:11 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:02:10Z</wsu:Created><wsu:Expires>2018-01-16T17:07:10Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-16T17:02:10Z">BL2IDSLGN1F005 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2018-01-16T17:02:10Z</wsu:Created><wsu:Expires>2018-04-16T17:02:10Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 24 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 960 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:11 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:02:09Z</wsu:Created><wsu:Expires>2018-01-16T17:07:09Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 23 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 960 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:11 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Acquired Service token.
ResourceURI: http://Passport.NET/tb
Created: 2018-01-16T17:02:09.000Z
Expires: 2018-04-16T17:02:09.000Z
TokenType: urn:passport:legacy
AuthRequired: The operation completed successfully.
RequestStatus: The operation completed successfully.
HasFlowUrl: false
HasAuthUrl: false
HasEndAuthUrl: false | 6117 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 22 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2016 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:11 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <S:Envelope><S:Header><wsa:Action wsu:Id="Action" S:mustUnderstand="1">*</wsa:Action><wsa:To wsu:Id="To" S:mustUnderstand="1">*</wsa:To><wsse:Security S:mustUnderstand="1"><wsu:Timestamp wsu:Id="TS"><wsu:Created>2018-01-16T17:02:09Z</wsu:Created><wsu:Expires>2018-01-16T17:07:09Z</wsu:Expires></wsu:Timestamp></wsse:Security><psf:pp><psf:serverVersion>*</psf:serverVersion><psf:PUID>*</psf:PUID><psf:configVersion>16.000.26889.00</psf:configVersion><psf:uiVersion>*</psf:uiVersion><psf:mobileConfigVersion>*</psf:mobileConfigVersion><psf:appDataVersion>*</psf:appDataVersion><psf:authstate>0x48803</psf:authstate><psf:reqstatus>0x0</psf:reqstatus><psf:serverInfo Path="Live1" RollingUpgradeState="ExclusiveNew" LocVersion="0" ServerTime="2018-01-16T17:02:09Z">BL2IDSLGN1H028 2018.01.02.12.52.34</psf:serverInfo><psf:cookies/><psf:credProperties><psf:credProperty Name="AuthMembername">*</psf:credProperty><psf:credProperty Name="ChildFlags">*</psf:credProperty><psf:credProperty Name="Flags">*</psf:credProperty><psf:credProperty Name="FlagsV2">*</psf:credProperty><psf:credProperty Name="IP">*</psf:credProperty><psf:credProperty Name="AssociatedForStrongAuth">*</psf:credProperty><psf:credProperty Name="RestrictedDA">*</psf:credProperty><psf:credProperty Name="TemporaryPassword">*</psf:credProperty><psf:credProperty Name="KeyPurposes">*</psf:credProperty></psf:credProperties><psf:extProperties><psf:extProperty Name="Notifications"></psf:extProperty></psf:extProperties><psf:response/><psf:DeviceTpmKeyState>*</psf:DeviceTpmKeyState><psf:LicenseSignatureKeyVersion>*</psf:LicenseSignatureKeyVersion></psf:pp></S:Header><S:Body><wst:RequestSecurityTokenResponse><wst:TokenType>urn:passport:legacy</wst:TokenType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:Lifetime><wsu:Created>2018-01-16T17:02:09Z</wsu:Created><wsu:Expires>2018-04-16T17:02:09Z</wsu:Expires></wst:Lifetime><wst:RequestedSecurityToken><EncryptedData xmlns="http://www.w3.org/2001/04/xmlenc#" Id="devicesoftware" Type="http://www.w3.org/2001/04/xmlenc#Element"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"></EncryptionMethod><ds:KeyInfo><ds:KeyName>*</ds:KeyName></ds:KeyInfo><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedData></wst:RequestedSecurityToken><wst:RequestedAttachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedAttachedReference><wst:RequestedUnattachedReference><wsse:SecurityTokenReference><wsse:Reference URI="2jmj7l5rSw0yVb/vlWAYkK/YBwk="></wsse:Reference></wsse:SecurityTokenReference></wst:RequestedUnattachedReference><wst:RequestedProofToken><wst:BinarySecret Type="urn:liveid:clepkey">*</wst:BinarySecret><EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#"><EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/><CipherData><CipherValue>*</CipherValue></CipherData></EncryptedKey></wst:RequestedProofToken></wst:RequestSecurityTokenResponse></S:Body></S:Envelope> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 21 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2016 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:11 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <s:Envelope><s:Header><wsa:Action s:mustUnderstand="1">*</wsa:Action><wsa:To s:mustUnderstand="1">*</wsa:To><wsa:MessageID>*</wsa:MessageID><ps:AuthInfo Id="PPAuthInfo"><ps:HostingApp>*</ps:HostingApp><ps:BinaryVersion>*</ps:BinaryVersion><ps:UIVersion>*</ps:UIVersion><ps:InlineUX>*</ps:InlineUX><ps:IsAdmin>*</ps:IsAdmin><ps:Cookies></ps:Cookies><ps:RequestParams>*</ps:RequestParams><ps:WindowsClientString>*</ps:WindowsClientString></ps:AuthInfo><wsse:Security><wsse:UsernameToken wsu:Id="devicesoftware"><wsse:Username>*</wsse:Username></wsse:UsernameToken><wsu:Timestamp wsu:Id="Timestamp"><wsu:Created>2018-01-16T17:02:08Z</wsu:Created><wsu:Expires>2018-01-16T17:07:08Z</wsu:Expires></wsu:Timestamp><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI="#RST0"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#PPAuthInfo"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference><Reference URI="#Timestamp"><Transforms><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue></Signature></wsse:Security></s:Header><s:Body><wst:RequestSecurityToken Id="RST0"><wst:RequestType>*</wst:RequestType><wsp:AppliesTo><wsa:EndpointReference><wsa:Address>http://Passport.NET/tb</wsa:Address></wsa:EndpointReference></wsp:AppliesTo></wst:RequestSecurityToken></s:Body></s:Envelope> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 20 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2016 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:10 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Response: <DeviceAddResponse Success="true"><success>*</success><puid>*</puid><DeviceTpmKeyState>*</DeviceTpmKeyState><License ContentID="3252b20c-d425-4711-8cc5-b2f53c830b76" ID="14e54a84-287b-4cef-b9fa-685453f20d08" LicenseID="3252b20c-d425-4711-8cc5-b2f53c830b76" Version="2" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><Binding Binding_Type="Machine" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><DeviceID xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</DeviceID></Binding><LicenseInfo Type="Device" xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls"><IssuedDate xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</IssuedDate></LicenseInfo><SPLicenseBlock xmlns="urn:schemas-microsoft-com:windows:store:licensing:ls">*</SPLicenseBlock><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></CanonicalizationMethod><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"></SignatureMethod><Reference URI=""><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"></Transform><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"></Transform></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"></DigestMethod><DigestValue>*</DigestValue></Reference></SignedInfo><SignatureValue>*</SignatureValue><KeyInfo Id="_ee588d09-4100-b519-9860-d4c12cc4ea67"><KeyValue><RSAKeyValue><Modulus>*</Modulus><Exponent>*</Exponent></RSAKeyValue></KeyValue></KeyInfo></Signature></License><HWDeviceID>*</HWDeviceID><GlobalDeviceID>*</GlobalDeviceID><DeviceTpmKeyState>*</DeviceTpmKeyState><ServerInfo ServerTime="2018-01-16T17:02:08Z">BL2IDSLGN1H003 2018.01.02.12.52.34</ServerInfo></DeviceAddResponse> | 6116 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 19 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2016 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:10 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
## SOAP Request: <DeviceAddRequest><ClientInfo name="IDCRL" version="1.0"/><Authentication><Membername>*</Membername><Password>*</Password></Authentication><DeviceInfo Id="DeviceInfo"><Component name="4128">*</Component><Component name="4130">*</Component><Component name="4112">*</Component><Component name="4113">*</Component><Component name="4097">*</Component><Component name="4098">*</Component><Component name="4099">*</Component><Component name="4100">*</Component><Component name="4101">*</Component><Component name="4102">*</Component><Component name="8195">*</Component><Component name="8196">*</Component><Component name="4144">*</Component><Component name="4145">*</Component><TPMInfo><KeyValue><RSAKeyValue><Modulus>*</Modulus><Exponent>*</Exponent></RSAKeyValue><KeyType>*</KeyType></KeyValue></TPMInfo></DeviceInfo></DeviceAddRequest> | 6115 | 0 | | 4 | 0 | 0 | 4611686018429487104 | 18 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2016 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:07 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 17 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 924 | 2480 | WIN-5T344G8GM1H | S-1-5-18 | 1/16/2018 5:02:07 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::RetrieveDeviceData encountered unexpected error code (The device is not ready for use.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 16 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2012 | 2284 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:20 PM | 60e27e42-8f3f-0003-f97e-e2603f8fd301 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::SetupIdentityHandle encountered unexpected error code (Unknown HResult Error code: 0x8004805f). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 15 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2012 | 2284 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:20 PM | 60e27e42-8f3f-0003-f97e-e2603f8fd301 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
RPC call to function WLIDCreateContext returned the following error code: 0x8004805F. | 6113 | 0 | | 2 | 0 | 0 | 4611686018431584274 | 14 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 916 | 980 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:20 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::RetrieveDeviceData encountered unexpected error code (The device is not ready for use.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 13 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2012 | 2284 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:20 PM | 60e27e42-8f3f-0003-f87e-e2603f8fd301 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::SetupIdentityHandle encountered unexpected error code (Unknown HResult Error code: 0x8004805f). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 12 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2012 | 2284 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:20 PM | 60e27e42-8f3f-0003-f87e-e2603f8fd301 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
RPC call to function WLIDCreateContext returned the following error code: 0x8004805F. | 6113 | 0 | | 2 | 0 | 0 | 4611686018431584274 | 11 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 916 | 980 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:20 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::RetrieveDeviceData encountered unexpected error code (The device is not ready for use.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 10 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2012 | 2284 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:20 PM | 60e27e42-8f3f-0003-f77e-e2603f8fd301 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::SetupIdentityHandle encountered unexpected error code (Unknown HResult Error code: 0x8004805f). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 9 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2012 | 2284 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:20 PM | 60e27e42-8f3f-0003-f77e-e2603f8fd301 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
RPC call to function WLIDCreateContext returned the following error code: 0x8004805F. | 6113 | 0 | | 2 | 0 | 0 | 4611686018431584274 | 8 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 916 | 2028 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:20 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::RetrieveDeviceData encountered unexpected error code (The device is not ready for use.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 7 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2012 | 2284 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:20 PM | 60e27e42-8f3f-0003-ec7e-e2603f8fd301 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::SetupIdentityHandle encountered unexpected error code (Unknown HResult Error code: 0x8004805f). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 6 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2012 | 2284 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:20 PM | 60e27e42-8f3f-0003-ec7e-e2603f8fd301 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
RPC call to function WLIDCreateContext returned the following error code: 0x8004805F. | 6113 | 0 | | 2 | 0 | 0 | 4611686018431584274 | 5 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 916 | 2028 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:20 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
Operation: Service started
Details: The service will auto stop if no requests received for some period of time.
Status: 0x0
| 2024 | 0 | | 4 | 101 | 0 | 4611686018427387920 | 4 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 916 | 2028 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:20 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Information | Info | WLID Service Operation | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::RetrieveDeviceData encountered unexpected error code (The device is not ready for use.). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 3 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2012 | 2284 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:19 PM | 60e27e42-8f3f-0003-e87e-e2603f8fd301 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
ErrorVerifier in function Windows::Internal::Security::WebAuthentication::UserHostAuthenticationOperation::SetupIdentityHandle encountered unexpected error code (Unknown HResult Error code: 0x8004805f). | 2028 | 0 | | 2 | 0 | 0 | 4611686018427387907 | 2 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 2012 | 2284 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:19 PM | 60e27e42-8f3f-0003-e87e-e2603f8fd301 | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |
RPC call to function WLIDCreateContext returned the following error code: 0x8004805F. | 6113 | 0 | | 2 | 0 | 0 | 4611686018431584274 | 1 | Microsoft-Windows-LiveId | 05f02597-fe85-4e67-8542-69567ab8fd4f | Microsoft-Windows-LiveId/Operational | 916 | 2028 | WIN-PD8DQPRRTAO | S-1-5-18 | 1/16/2018 5:01:19 PM | | | microsoft-windows-liveid/operational | System.UInt32[] | System.Diagnostics.Eventing.Reader.EventBookmark | Error | Info | | System.Collections.ObjectModel.ReadOnlyCollection`1[System.String] | System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty] |