detection.wiki

Microsoft-Gaming-Services

EventTitleChannelSampleRule
9001Function Error: Source Function: Error Source: Message (ErrorCode).OperationalNN
9002Function Error: Source Function: Error Source: Message (ErrorCode).OperationalNN
9003Function Error: Source Function: Error Source: Message (ErrorCode).OperationalNN
9004Function Error: Source Function: Error Source: Message (ErrorCode).OperationalNN
9005Status Status: Message.OperationalNN
9006Status Status: Message.OperationalNN
9007Status Status: Message.OperationalNN
9008Status Status: Message.OperationalNN
9009Status Status: Message.OperationalNN
9010Status Status: Message.OperationalNN
9011Status Status: Message.OperationalNN
9012Status Status: Message.OperationalNN

Event ID 9001: Function Error: Source Function: Error Source: Message (ErrorCode).

#
Channel
Operational
Task
GamingServices
Opcode
Error

Description

Message Error: ErrorCode Function: Function Source: Source (LineNumber)

Message #

%1
Error: %3
Function: %2
Source: %4 (%5)

Fields #

NameDescription
Message UnicodeString
Function AnsiString
ErrorCode Int32
Source AnsiString
LineNumber UInt32

Event ID 9002: Function Error: Source Function: Error Source: Message (ErrorCode).

#
Channel
Operational
Task
GamingServices
Opcode
Warning

Description

Message Error: ErrorCode Function: Function Source: Source (LineNumber)

Message #

%1
Error: %3
Function: %2
Source: %4 (%5)

Fields #

NameDescription
Message UnicodeString
Function AnsiString
ErrorCode Int32
Source AnsiString
LineNumber UInt32

Event ID 9003: Function Error: Source Function: Error Source: Message (ErrorCode).

#
Channel
Operational
Task
GamingServices
Opcode
Info

Description

Message Error: ErrorCode Function: Function Source: Source (LineNumber)

Message #

%1
Error: %3
Function: %2
Source: %4 (%5)

Fields #

NameDescription
Message UnicodeString
Function AnsiString
ErrorCode Int32
Source AnsiString
LineNumber UInt32

Event ID 9004: Function Error: Source Function: Error Source: Message (ErrorCode).

#
Channel
Operational
Task
GamingServices
Opcode
Verbose

Description

Message Error: ErrorCode Function: Function Source: Source (LineNumber)

Message #

%1
Error: %3
Function: %2
Source: %4 (%5)

Fields #

NameDescription
Message UnicodeString
Function AnsiString
ErrorCode Int32
Source AnsiString
LineNumber UInt32

Event ID 9005: Status Status: Message.

#
Channel
Operational
Task
GamingServices_9005
Opcode
Error

Description

Message Status: ErrorCode

Message #

%1
Status: %2

Fields #

NameDescription
Message UnicodeString
ErrorCode HexInt32

Event ID 9006: Status Status: Message.

#
Channel
Operational
Task
GamingServices_9005
Opcode
Warning

Description

Message Status: ErrorCode

Message #

%1
Status: %2

Fields #

NameDescription
Message UnicodeString
ErrorCode HexInt32

Event ID 9007: Status Status: Message.

#
Channel
Operational
Task
GamingServices_9005
Opcode
Info

Description

Message Status: ErrorCode

Message #

%1
Status: %2

Fields #

NameDescription
Message UnicodeString
ErrorCode HexInt32

Event ID 9008: Status Status: Message.

#
Channel
Operational
Task
GamingServices_9005
Opcode
Verbose

Description

Message Status: ErrorCode

Message #

%1
Status: %2

Fields #

NameDescription
Message UnicodeString
ErrorCode HexInt32

Event ID 9009: Status Status: Message.

#
Channel
Operational
Task
GamingServices_9009
Opcode
Error

Description

Message Status: ErrorCode

Message #

%1
Status: %2

Fields #

NameDescription
Message UnicodeString
ErrorCode HexInt32

Event ID 9010: Status Status: Message.

#
Channel
Operational
Task
GamingServices_9009
Opcode
Warning

Description

Message Status: ErrorCode

Message #

%1
Status: %2

Fields #

NameDescription
Message UnicodeString
ErrorCode HexInt32

Event ID 9011: Status Status: Message.

#
Channel
Operational
Task
GamingServices_9009
Opcode
Info

Description

Message Status: ErrorCode

Message #

%1
Status: %2

Fields #

NameDescription
Message UnicodeString
ErrorCode HexInt32

Event ID 9012: Status Status: Message.

#
Channel
Operational
Task
GamingServices_9009
Opcode
Verbose

Description

Message Status: ErrorCode

Message #

%1
Status: %2

Fields #

NameDescription
Message UnicodeString
ErrorCode HexInt32

Provenance

ETW provider GUID bc1bdb57-71a2-581a-147b-e0b49474a2d4

Defined in InstallServiceTasks.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.3692, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB