Windows 10: regarding what appears to be more than one phantom error in the eventlog with eventid 5038

Hello to all, I am just wondering about this Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error. \Device\HarddiskVolume3\Windows\Temp\UDD4CA1.tmp.. I got this recently along with 6 other audit failures similar to the one mentioned just now.. I don't know what this is about or how to fix it either even if it is fixable at this time.. All I know is that if I go to the Windows\Temp folder under File Explorer it does not show that file or any of the files in question mentioned in the eventlog either! Also, The eventid is 5038 as well. I am also certain that I do not have any malware currently on my system as well as that I have also tried an sfc /scannow and according to that everything is fine as well.. Anyways, Thanks for listening and have a great day too..

:)

 

regarding what appears to be more than one phantom error in the eventlog with eventid 5038

Hello to all, I am just wondering about this Code integrity determined that the image hash of a file is not valid. The file could be corrupt due to unauthorized modification or the invalid hash could indicate a potential disk device error. \Device\HarddiskVolume3\Windows\Temp\UDD4CA1.tmp..
I got this recently along with 6 other audit failures similar to the one mentioned just now.. I don't know what this is about or how to fix it either even if it is fixable at this time.. All I know is that if I go to the Windows\Temp folder under File Explorer
it does not show that file or any of the files in question mentioned in the eventlog either! Also, The eventid is 5038 as well. I am also certain that I do not have any malware currently on my system as well as that I have also tried an sfc /scannow and according
to that everything is fine as well.. Anyways, Thanks for listening and have a great day too..

 

regarding what appears to be more than one phantom error in the eventlog with eventid 5038

It doesn't matter if it platter HD or SSD, all storage devices eventually fail. SSDs have a limited write cycle lifespan, but nothing you should be worried about for a few years, and even when they do begin to fail they are much better at managing bad
blocks. Like I said, I don't think it is storage related. if it were, you would be seeing a cascade of issues. If that is a concern, you download any number of disk utilities to check storage health.

As for the event, you can read more about here:
https://docs.microsoft.com/en-us/windows/securi....

 

regarding what appears to be more than one phantom error in the eventlog with eventid 5038

Hi and thanks for reaching out. My name is William. I'm a Windows technical expert. I'll be happy to help you out today.

The C:\Windows\temp folder serves as a dynamic folder for programs installed for all users. In the process of downloading, installing programs or running these programs, they will go off and download new binaries or installer packages in the process of updating
themselves. If any of the files are drivers (.dll or .sys) or other system files that have not been digitally signed with a valid certificate, then this event is recorded.

On the flip-side, you will also see this is your disk is beginning to fail and the system or driver files are stored in the bad sectors of the storage device, hence making it impossible to ascertain the digital signature. The latter is the rarer of the two
and since the location is the temp folder it would be expected that file(s) that were being flagged have since been deleted by the parent program.

If you are concerned about disk errors, check the Event Viewer > Windows Logs > System for errors with Disk as the Source or run chkdsk against your system drive.