Event ID 6281

Code Integrity determined that the page hashes of an image file are not valid.

Code Integrity determined that the page hashes of an image file are not valid. The file could be improperly signed without page hashes or corrupt due to unauthorized modification. The invalid hashes could indicate a potential disk device error.

File Name:  %1

Microsoft Documentation

Event ID - 6281

Lookup Audit Policy Configuration Settings


  C:\> AuditPol.exe /get  /subcategory:"System Integrity"

How to enable Windows Auditing

Recommended Audit Policy

Operating Systems:

Windows 2008 R2 Windows 7 Windows 2012 Windows 2012 R2 Windows 8 Windows 8.1 Windows 10 Windows 2016 Windows 2019 Windows 11 Windows 2022

Tags:

Audit Failure

Audit Category:

System

Audit Subcategory:

System Integrity

LEFT/RIGHT arrow keys for navigation

Back to List