Microsoft-Windows-AppHost

EventTitleChannelSampleRule
101The App Host failed to launch because a problem occurred while loading the app …AdminNN
102The App Host has encountered an unexpected error and will terminate.AdminNN
112WWAJSE report submitted with parameters 1: <param1> 2: <param2> 3: <param3> 4: …AdminYN
121The App Host failed to enumerate WinRT namespaces due to an issue with a winmd …AdminNN
122The App Host failed to enumerate WinRT namespaces due to unknown error.AdminNN
126App <.AdminNN
127App <.AdminYN
128This app was closed because of a critical infrastructure failure.AdminNN
129This app was closed because one or more packages were modified.AdminNN
131App <.AdminNN
132App <.AdminNN
133The App Host could not start because the host module Module::Function failed …AdminNN
134The App Host could not start because the web module …AdminNN
135The App Host could not start because the platform (WebInstance) failed with …AdminNN
136The App Host could not start because WinRT failed to initialize with HResult.AdminNN
137Pending resume event was signaled to the Host.AdminNN
500Infrastructure.LifecycleAppHostOperationSucceededInternalNN
502Infrastructure.LifecycleAppHostOperationSucceeded502InternalNN
504Infrastructure.LifecycleAppHostOperationSucceeded504InternalNN
506SuspendingAppHostInformationInternalNN
507SuspendingAppHostInformation507InternalNN
508SuspendingAppHostInformation508InternalNN
509SuspendingAppHostInformation509InternalNN
511SuspendingAppHostInformation511InternalNN
512SuspendingAppHostInformation512InternalNN
513SuspendingAppHostInformation513InternalNN
514Activation.ModuleInitializationAppHostInformationInternalNN
515The App has subdownloads remaining to complete during suspension.InternalNN
516SuspendingInternalPlmTimeoutExprationAppHostInformationInternalNN
517SuspendingSubDownloadsAppHostInformationInternalNN
518SuspendingGarbageCollectionAppHostInformationInternalNN
1001Navigation.NavigationDomain.DecisionStartDiagnosticNN
1002Navigation.NavigationDomain.DecisionStopDiagnosticNN
1003MswwaProtocol.PackageToFileUriStartDiagnosticNN
1004MswwaProtocol.PackageToFileUriStopDiagnosticNN
1007Activation.ModuleInitializationStartDiagnosticNN
1008Activation.ModuleInitializationStopDiagnosticNN
1009Infrastructure.Host.SetupStartDiagnosticNN
1010Infrastructure.Host.SetupStopDiagnosticNN
1011NavigationStartDiagnosticNN
1012NavigationStopDiagnosticNN
1015Telemetry.WERReportingStartDiagnosticNN
1016Telemetry.WERReportingStopDiagnosticNN
1017Infrastructure.Host.UptimeStartDiagnosticNN
1018Infrastructure.Host.UptimeStopDiagnosticNN
1019ApplicationActivateEventStartDiagnosticNN
1020ApplicationActivateEventStopDiagnosticNN
1021ApplicationTerminationStartDiagnosticNN
1022ApplicationTerminationStopDiagnosticNN
1023SuspendingStartDiagnosticNN
1024SuspendingStopDiagnosticNN
1025ResumingStartDiagnosticNN
1026ResumingStopDiagnosticNN
1027Infrastructure.WebInstance.SetupStartDiagnosticNN
1028Infrastructure.WebInstance.SetupStopDiagnosticNN
1029InputPanelShowStartDiagnosticNN
1030InputPanelShowStopDiagnosticNN
1031InputPanelHideStartDiagnosticNN
1032InputPanelHideStopDiagnosticNN
1033SuspendingSubDownloadsStartDiagnosticNN
1034SuspendingSubDownloadsStopDiagnosticNN
1035TerminateAppStartDiagnosticNN
1036TerminateAppStopDiagnosticNN
1037MswwaProtocol.AppDataToFileUriStartDiagnosticNN
1038MswwaProtocol.AppDataToFileUriStopDiagnosticNN
1039EvaluatePackageStartDiagnosticNN
1040EvaluatePackageStopDiagnosticNN
1041ResizeStartDiagnosticNN
1042ResizeStopDiagnosticNN
1043ViewStateStartDiagnosticNN
1044ViewStateStopDiagnosticNN
1045InputPanelResizeViewportStartDiagnosticNN
1046InputPanelResizeViewportStopDiagnosticNN
1047SuspendingGarbageCollectionStartDiagnosticNN
1048SuspendingGarbageCollectionStopDiagnosticNN
1049ThreadMrtInitializationStartDiagnosticNN
1050ThreadMrtInitializationStopDiagnosticNN
1051Infrastructure.Host.HostModulesInitializationStartDiagnosticNN
1052Infrastructure.Host.HostModulesInitializationStopDiagnosticNN
1053Infrastructure.Host.HostRunStartDiagnosticNN
1054Infrastructure.Host.HostRunStopDiagnosticNN
1055Infrastructure.WebInstance.InitializeStartDiagnosticNN
1056Infrastructure.WebInstance.InitializeStopDiagnosticNN
1057Infrastructure.WebInstance.DispatchStartDiagnosticNN
1058Infrastructure.WebInstance.DispatchStopDiagnosticNN
1059Infrastructure.WebInstance.RunStartDiagnosticNN
1060Infrastructure.WebInstance.RunStopDiagnosticNN
1061WinRTAsyncCallStartDiagnosticNN
1062WinRTAsyncCallStopDiagnosticNN
1063MemoryStatsOnSuspendDiagnosticNN
1064LayoutChangedStartDiagnosticNN
1065LayoutChangedStopDiagnosticNN
1066ApplicationActivateEventDiagnosticNN
1067ByteCodeSourceMappingDiagnosticNN
1068ByteCodeSourceMapping1068DiagnosticNN
1069LeavingBackgroundStartDiagnosticNN
1070LeavingBackgroundStopDiagnosticNN
1071EnteredBackgroundStartDiagnosticNN
1072EnteredBackgroundStopDiagnosticNN
1073BackgroundActivatedStartDiagnosticNN
1074BackgroundActivatedStopDiagnosticNN
10000SourceMessageId : Message.ApplicationTracingNN
10001SourceMessageId : Message.ApplicationTracingNN
10002SourceMessageId : Message.ApplicationTracingNN
10003Suspending Deferral Increment.ApplicationTracingNN
10004Suspending Deferral Decrement.ApplicationTracingNN
10005Activation.CompleteActivationStartDiagnosticNN
10006Activation.CompleteActivationStopDiagnosticNN
10007DrawingAppHostInformationInternalNN
10009NavigationStart10009DiagnosticNN
10010NavigationStop10010DiagnosticNN

Event ID 101: The App Host failed to launch because a problem occurred while loading the app files and settings.

#
Channel
Admin

Description

The App Host failed to launch because a problem occurred while loading the app files and settings. Ensure that the app is properly installed or try reinstalling the app.

Message #

The App Host failed to launch because a problem occurred while loading the app files and settings. Ensure that the app is properly installed or try reinstalling the app.

Event ID 102: The App Host has encountered an unexpected error and will terminate.

#
Channel
Admin
Task
Initialize
Opcode
AppHostOperationFailed

Description

The App Host has encountered an unexpected error and will terminate. The error is HResult.

Message #

The App Host has encountered an unexpected error and will terminate. The error is  %1.

Fields #

NameDescription
HResult HexInt32
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 112: WWAJSE report submitted with parameters 1: <param1> 2: <param2> 3: <param3> 4: <param4> 5: <param5> 6: <param6>.

#
Channel
Admin
Level
Informational
Task
Telemetry.WERReporting
Opcode
AppHostInformation

Description

WWAJSE report submitted with parameters 1: <param1> 2: <param2> 3: <param3> 4: <param4> 5: <param5> 6: <param6>. (PID: <PID>. Process Creation Time: <ProcessCreationTime>. App Binary Path: <ApplicationBinaryPath>.) Report Id: <ReportId>.

Message #

WWAJSE report submitted with parameters 1: <%1> 2: <%2> 3: <%3> 4: <%4> 5: <%5> 6: <%6>. (PID: <%7>. Process Creation Time: <%8>. App Binary Path: <%9>.) Report Id: <%10>

Fields #

NameDescription
WWAJSERacReportEvent.param1 UnicodeString
WWAJSERacReportEvent.param2 UnicodeString
WWAJSERacReportEvent.param3 UnicodeString
WWAJSERacReportEvent.param4 UnicodeString
WWAJSERacReportEvent.param5 UnicodeString
WWAJSERacReportEvent.param6 UnicodeString
WWAJSERacReportEvent.PID Int32
WWAJSERacReportEvent.ProcessCreationTime UnicodeString
WWAJSERacReportEvent.ApplicationBinaryPath UnicodeString
WWAJSERacReportEvent.ReportId UnicodeString
param1 UnicodeString
param2 UnicodeString
param3 UnicodeString
param4 UnicodeString
param5 UnicodeString
param6 UnicodeString
PID Int32
ProcessCreationTime UnicodeString
ApplicationBinaryPath UnicodeString
ReportId UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppHost",
    "guid": "{98E0765D-8C42-44A3-A57B-760D7F93225A}",
    "event_source_name": "",
    "event_id": 112,
    "version": 0,
    "level": 4,
    "task": 8,
    "opcode": 14,
    "keywords": -9223372036854775807,
    "time_created": "2026-05-30T01:59:53.2155499+00:00",
    "event_record_id": 4,
    "correlation": {},
    "execution": {
      "process_id": 8300,
      "thread_id": 704
    },
    "channel": "Microsoft-Windows-AppHost/Admin",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
    }
  },
  "user_data": {
    "WWAJSERacReportEvent": {
      "param1": "Microsoft.Windows.CloudExperienceHost_10.0.20348.1_neutral_neutral_cw5n1h2txyewy",
      "param2": "App",
      "param3": "f675",
      "param4": "FFFFFFFD",
      "param5": "(null)",
      "param6": "0_0",
      "PID": "8300",
      "ProcessCreationTime": "1dcefd80069de95",
      "ApplicationBinaryPath": "C:\\Windows\\system32\\wwahost.exe",
      "ReportId": "5464222b-d126-4816-a885-60fc1cf0bf9e"
    }
  },
  "message": "WWAJSE report submitted with parameters 1: <Microsoft.Windows.CloudExperienceHost_10.0.20348.1_neutral_neutral_cw5n1h2txyewy> 2: <App> 3: <f675> 4: <FFFFFFFD> 5: <(null)> 6: <0_0>. (PID: <8300>. Process Creation Time: <1dcefd80069de95>. App Binary Path: <C:\\Windows\\system32\\wwahost.exe>.) Report Id: <5464222b-d126-4816-a885-60fc1cf0bf9e>"
}

Event ID 121: The App Host failed to enumerate WinRT namespaces due to an issue with a winmd file.

#
Channel
Admin
Task
WinRTIntegration
Opcode
AppHostOperationFailed

Description

The App Host failed to enumerate WinRT namespaces due to an issue with a winmd file. If you have third party winmd files ensure they are not corrupt and that their filenames match their corresponding namespace names.

Message #

The App Host failed to enumerate WinRT namespaces due to an issue with a winmd file. If you have third party winmd files ensure they are not corrupt and that their filenames match their corresponding namespace names.

Fields #

NameDescription
HResultErrorCode HexInt32
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 122: The App Host failed to enumerate WinRT namespaces due to unknown error.

#
Channel
Admin
Task
WinRTIntegration
Opcode
AppHostOperationFailed

Description

The App Host failed to enumerate WinRT namespaces due to unknown error. (HResultErrorCode).

Message #

The App Host failed to enumerate WinRT namespaces due to unknown error. (%1)

Fields #

NameDescription
HResultErrorCode HexInt32
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 126: App <.

#
Channel
Admin
Task
Telemetry.WERReporting
Opcode
AppHostOperationFailed

Description

App <ApplicationName> crashed with an unhandled Javascript exception. App details are as follows: Display Name:<DisplayName>, AppUserModelId: <AppUserModelId> Package Identity:<PackageFullName> PID:<ProcessId>. The details of the JavaScript exception are as follows Exception Name:<ErrorType>, Description:<ErrorDescription>, HTML Document Path:<DocumentFile>, Source File Name:<SourceFile>, Source Line Number:<SourceLine>, Source Column Number:<SourceColumn>, and Stack Trace: StackTrace.

Message #

App <%2> crashed with an unhandled Javascript exception. App details are as follows: Display Name:<%1>, AppUserModelId: <%3> Package Identity:<%4> PID:<%5>. The details of the JavaScript exception are as follows Exception Name:<%6>, Description:<%7>, HTML Document Path:<%8>, Source File Name:<%9>, Source Line Number:<%10>, Source Column Number:<%11>, and Stack Trace: %12.

Fields #

NameDescription
DisplayName UnicodeString
ApplicationName UnicodeString
AppUserModelId UnicodeString
PackageFullName UnicodeString
ProcessId Int32
ErrorType UnicodeString
ErrorDescription UnicodeString
DocumentFile UnicodeString
SourceFile UnicodeString
SourceLine Int32
SourceColumn Int32
StackTrace UnicodeString

Event ID 127: App <.

#
Channel
Admin
Level
Error
Task
Telemetry.WERReporting
Opcode
AppHostOperationFailed

Description

App <WWATerminateApplication.ApplicationName> terminated itself by calling terminateApp API. App details are as follows: Display Name:<WWATerminateApplication.DisplayName>, AppUserModelId: <WWATerminateApplication.AppUserModelId> Package Identity:<WWATerminateApplication.PackageFullName> PID:<WWATerminateApplication.ProcessId>. The API was called from the context of the following HTML document: <WWATerminateApplication.DocumentFile>. Error object passed to terminateApp carried the following details Description:<WWATerminateApplication.ErrorDescription>, and Stack Trace:- WWATerminateApplication.StackTrace.

Message #

App <%2> terminated itself by calling terminateApp API. App details are as follows:  Display Name:<%1>, AppUserModelId: <%3> Package Identity:<%4> PID:<%5>. The API was called from the context of the following HTML document:  <%7>. Error object passed to terminateApp carried the following details Description:<%6>, and Stack Trace:- %8.

Fields #

NameDescription
WWATerminateApplication.DisplayName UnicodeString
WWATerminateApplication.ApplicationName UnicodeString
WWATerminateApplication.AppUserModelId UnicodeString
WWATerminateApplication.PackageFullName UnicodeString
WWATerminateApplication.ProcessId Int32
WWATerminateApplication.ErrorDescription UnicodeString
WWATerminateApplication.DocumentFile UnicodeString
WWATerminateApplication.StackTrace UnicodeString
DisplayName UnicodeString
ApplicationName UnicodeString
AppUserModelId UnicodeString
PackageFullName UnicodeString
ProcessId Int32
ErrorDescription UnicodeString
DocumentFile UnicodeString
StackTrace UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppHost",
    "guid": "{98E0765D-8C42-44A3-A57B-760D7F93225A}",
    "event_source_name": "",
    "event_id": 127,
    "version": 0,
    "level": 2,
    "task": 8,
    "opcode": 12,
    "keywords": -9223372036854775807,
    "time_created": "2026-05-30T01:59:53.1373982+00:00",
    "event_record_id": 3,
    "correlation": {},
    "execution": {
      "process_id": 8300,
      "thread_id": 12668
    },
    "channel": "Microsoft-Windows-AppHost/Admin",
    "computer": "JD-DC01-2022.ludus.domain",
    "security": {
      "user_id": "S-1-5-21-1006758700-2167138679-1475694448-1105"
    }
  },
  "user_data": {
    "WWATerminateApplication": {
      "DisplayName": "Microsoft account",
      "ApplicationName": "App",
      "AppUserModelId": "Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App",
      "PackageFullName": "Microsoft.Windows.CloudExperienceHost_10.0.20348.1_neutral_neutral_cw5n1h2txyewy",
      "ProcessId": "8300",
      "ErrorDescription": {
        "setPromise": "[function]"
      },
      "DocumentFile": "/default.html",
      "StackTrace": "Error: Scenario not set. If you are in debug mode, please launch with a URI.\n   at AppManager.prototype._crashCxh (ms-appx://microsoft.windows.cloudexperiencehost/js/appManager.js:203:13)\n   at AppManager.prototype._setScenario (ms-appx://microsoft.windows.cloudexperiencehost/js/appManager.js:369:17)\n   at AppManager.prototype.initialize (ms-appx://microsoft.windows.cloudexperiencehost/js/appManager.js:75:13)\n   at Anonymous function (ms-appx://microsoft.windows.cloudexperiencehost/js/default.js:46:13)\n   at p (ms-appx://microsoft.windows.cloudexperiencehost/Microsoft.WinJS-reduced/js/base.js:2:37380)\n   at M.enter (ms-appx://microsoft.windows.cloudexperiencehost/Microsoft.WinJS-reduced/js/base.js:2:40967)\n   at _run (ms-appx://microsoft.windows.cloudexperiencehost/Microsoft.WinJS-reduced/js/base.js:2:42792)\n   at _completed (ms-appx://microsoft.windows.cloudexperiencehost/Microsoft.WinJS-reduced/js/base.js:2:42233)\n   at Anonymous function (ms-appx://microsoft.windows.cloudexperiencehost/core/js/require-helpers.js:12:13)\n   at l.execCb (ms-appx://microsoft.windows.cloudexperiencehost/lib/require.js:26:290)\n"
    }
  },
  "message": "App <App> terminated itself by calling terminateApp API. App details are as follows:  Display Name:<Microsoft account>, AppUserModelId: <Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy!App> Package Identity:<Microsoft.Windows.CloudExperienceHost_10.0.20348.1_neutral_neutral_cw5n1h2txyewy> PID:<8300>. The API was called from the context of the following HTML document:  </default.html>. Error object passed to terminateApp carried the following details Description:<{\"setPromise\":\"[function]\"}>, and Stack Trace:- Error: Scenario not set. If you are in debug mode, please launch with a URI.\n   at AppManager.prototype._crashCxh (ms-appx://microsoft.windows.cloudexperiencehost/js/appManager.js:203:13)\n   at AppManager.prototype._setScenario (ms-appx://microsoft.windows.cloudexperiencehost/js/appManager.js:369:17)\n   at AppManager.prototype.initialize (ms-appx://microsoft.windows.cloudexperiencehost/js/appManager.js:75:13)\n   at Anonymous function (ms-appx://microsoft.windows.cloudexperiencehost/js/default.js:46:13)\n   at p (ms-appx://microsoft.windows.cloudexperiencehost/Microsoft.WinJS-reduced/js/base.js:2:37380)\n   at M.enter (ms-appx://microsoft.windows.cloudexperiencehost/Microsoft.WinJS-reduced/js/base.js:2:40967)\n   at _run (ms-appx://microsoft.windows.cloudexperiencehost/Microsoft.WinJS-reduced/js/base.js:2:42792)\n   at _completed (ms-appx://microsoft.windows.cloudexperiencehost/Microsoft.WinJS-reduced/js/base.js:2:42233)\n   at Anonymous function (ms-appx://microsoft.windows.cloudexperiencehost/core/js/require-helpers.js:12:13)\n   at l.execCb (ms-appx://microsoft.windows.cloudexperiencehost/lib/require.js:26:290)\r\n."
}

Event ID 128: This app was closed because of a critical infrastructure failure.

#
Channel
Admin
Task
Telemetry.WERReporting
Opcode
AppHostInformation

Fields #

NameDescription
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 129: This app was closed because one or more packages were modified.

#
Channel
Admin
Task
Telemetry.WERReporting
Opcode
AppHostInformation

Description

This app was closed because one or more packages were modified. Please reinstall the app.

Message #

This app was closed because one or more packages were modified. Please reinstall the app.

Fields #

NameDescription
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 131: App <.

#
Channel
Admin
Task
Telemetry.WERReporting
Opcode
AppHostOperationFailed

Description

App <ApplicationName> terminated itself by window.close() API, which is not recommended. App details are as follows: Display Name:<DisplayName>, AppUserModelId: <AppUserModelId> Package Identity:<PackageFullName> PID:<ProcessId>. The API was called from the context of the following HTML document: <DocumentFile>

Message #

App <%2> terminated itself by window.close() API, which is not recommended. App details are as follows:  Display Name:<%1>, AppUserModelId: <%3> Package Identity:<%4> PID:<%5>. The API was called from the context of the following HTML document:  <%6>

Fields #

NameDescription
DisplayName UnicodeString
ApplicationName UnicodeString
AppUserModelId UnicodeString
PackageFullName UnicodeString
ProcessId Int32
DocumentFile UnicodeString

Event ID 132: App <.

#
Channel
Admin
Task
Telemetry.WERReporting
Opcode
AppHostOperationFailed

Description

App <ApplicationName> was terminated due to a navigation error with target url <TargetUrl> and error code <ErrorCode>. App details are as follows: Display Name:<DisplayName>, AppUserModelId: <AppUserModelId> Package Identity:<PackageFullName> PID:<ProcessId>. The Navigation was initiated from the context of the following HTML document: <DocumentFile>

Message #

App <%2> was terminated due to a navigation error with target url <%7> and error code <%8>. App details are as follows: Display Name:<%1>, AppUserModelId: <%3> Package Identity:<%4> PID:<%5>. The Navigation was initiated from the context of the following HTML document:  <%6>

Fields #

NameDescription
DisplayName UnicodeString
ApplicationName UnicodeString
AppUserModelId UnicodeString
PackageFullName UnicodeString
ProcessId Int32
DocumentFile UnicodeString
TargetUrl UnicodeString
ErrorCode UnicodeString

Event ID 133: The App Host could not start because the host module Module::Function failed with HResult.

#
Channel
Admin
Task
Infrastructure.Lifecycle
Opcode
AppHostOperationFailed

Message #

The App Host could not start because the host module %2::%1 failed with %3.

Fields #

NameDescription
Function UnicodeString
Module UnicodeString
HResult HexInt32
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 134: The App Host could not start because the web module WebInstance::Module::Function failed with HResult.

#
Channel
Admin
Task
Infrastructure.Lifecycle
Opcode
AppHostOperationFailed

Message #

The App Host could not start because the web module %3::%2::%1 failed with %4.

Fields #

NameDescription
Function UnicodeString
Module UnicodeString
WebInstance Int32
HResult HexInt32
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 135: The App Host could not start because the platform (WebInstance) failed with HResult.

#
Channel
Admin
Task
Infrastructure.Lifecycle
Opcode
AppHostOperationFailed

Message #

The App Host could not start because the platform (%1) failed with %2.

Fields #

NameDescription
WebInstance Int32
HResult HexInt32
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 136: The App Host could not start because WinRT failed to initialize with HResult.

#
Channel
Admin
Task
Infrastructure.Lifecycle
Opcode
AppHostOperationFailed

Message #

The App Host could not start because WinRT failed to initialize with %1.

Fields #

NameDescription
HResult HexInt32
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 137: Pending resume event was signaled to the Host.

#
Channel
Admin
Task
Infrastructure.Lifecycle
Opcode
AppHostInformation

Fields #

NameDescription
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 500: Infrastructure.LifecycleAppHostOperationSucceeded

#
Channel
Internal
Task
Infrastructure.Lifecycle
Opcode
AppHostOperationSucceeded

Fields #

NameDescription
Function UnicodeString
Module UnicodeString
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 502: Infrastructure.LifecycleAppHostOperationSucceeded502

#
Channel
Internal
Task
Infrastructure.Lifecycle
Opcode
AppHostOperationSucceeded

Fields #

NameDescription
Function UnicodeString
Module UnicodeString
WebInstance Int32
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 504: Infrastructure.LifecycleAppHostOperationSucceeded504

#
Channel
Internal
Task
Infrastructure.Lifecycle
Opcode
AppHostOperationSucceeded

Fields #

NameDescription
Action UnicodeString
WebInstance Int32
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 506: SuspendingAppHostInformation

#
Channel
Internal
Task
Suspending
Opcode
AppHostInformation

Fields #

NameDescription
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 507: SuspendingAppHostInformation507

#
Channel
Internal
Task
Suspending
Opcode
AppHostInformation

Fields #

NameDescription
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 508: SuspendingAppHostInformation508

#
Channel
Internal
Task
Suspending
Opcode
AppHostInformation

Fields #

NameDescription
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 509: SuspendingAppHostInformation509

#
Channel
Internal
Task
Suspending
Opcode
AppHostInformation

Fields #

NameDescription
WindowType Int32
WebPlatformSuspendDownloadPending Boolean
WebPlatformCleanupPending Boolean
WerReportDuringSuspend Boolean
suspendSubdownloadsCount Int32
NewTimeout Int32
CurrentTimeout Int32
PID Int32
TID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 511: SuspendingAppHostInformation511

#
Channel
Internal
Task
Suspending
Opcode
AppHostInformation

Fields #

NameDescription
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 512: SuspendingAppHostInformation512

#
Channel
Internal
Task
Suspending
Opcode
AppHostInformation

Fields #

NameDescription
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 513: SuspendingAppHostInformation513

#
Channel
Internal
Task
Suspending
Opcode
AppHostInformation

Fields #

NameDescription
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 514: Activation.ModuleInitializationAppHostInformation

#
Channel
Internal
Task
Activation.ModuleInitialization
Opcode
AppHostInformation

Fields #

NameDescription
PackageFullName UnicodeString
OSVersion HexInt64
WebPlatformVersion HexInt64
ScriptProjectionVersion HexInt32

Event ID 515: The App has subdownloads remaining to complete during suspension.

#
Channel
Internal
Task
Infrastructure.Lifecycle
Opcode
AppHostInformation

Description

The App has subdownloads remaining to complete during suspension. Host has requested the system for more time.

Message #

The App has subdownloads remaining to complete during suspension. Host has requested the system for more time.

Fields #

NameDescription
MainWebInstanceInitializeTime UInt64
AppSuspendHandlerInvoked UInt64
AppSuspendHandlerCompleted UInt64
WebPlatformSuspendDownloadPending Boolean
WebPlatformSuspendDownloadCount Int32
WebPlatformSuspendDownloadWaitStart UInt64
WebPlatformCleanupPending Boolean
WebPlatformCleanupStart UInt64
CurrentSuspendingTimeout Int32
NewSuspendingTimeout Int32
PID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 516: SuspendingInternalPlmTimeoutExprationAppHostInformation

#
Channel
Internal
Task
SuspendingInternalPlmTimeoutExpration
Opcode
AppHostInformation

Fields #

NameDescription
WindowType Int32
WebPlatformSuspendDownloadPending Boolean
WebPlatformCleanupPending Boolean
suspendSubdownloadsCount Int32
PID Int32
TID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 517: SuspendingSubDownloadsAppHostInformation

#
Channel
Internal
Task
SuspendingSubDownloads
Opcode
AppHostInformation

Fields #

NameDescription
WindowType Int32
WebPlatformSuspendDownloadPending Boolean
WebPlatformCleanupPending Boolean
PID Int32
TID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 518: SuspendingGarbageCollectionAppHostInformation

#
Channel
Internal
Task
SuspendingGarbageCollection
Opcode
AppHostInformation

Fields #

NameDescription
WindowType Int32
WebPlatformSuspendDownloadPending Boolean
WebPlatformCleanupPending Boolean
PID Int32
TID Int32
PackageFullName UnicodeString
AppUserModelId UnicodeString

Event ID 1001: Navigation.NavigationDomain.DecisionStart

#
Channel
Diagnostic
Task
Navigation.NavigationDomain.Decision
Opcode
Start

Event ID 1002: Navigation.NavigationDomain.DecisionStop

#
Channel
Diagnostic
Task
Navigation.NavigationDomain.Decision
Opcode
Stop

Event ID 1003: MswwaProtocol.PackageToFileUriStart

#
Channel
Diagnostic
Task
MswwaProtocol.PackageToFileUri
Opcode
Start

Event ID 1004: MswwaProtocol.PackageToFileUriStop

#
Channel
Diagnostic
Task
MswwaProtocol.PackageToFileUri
Opcode
Stop

Event ID 1007: Activation.ModuleInitializationStart

#
Channel
Diagnostic
Task
Activation.ModuleInitialization
Opcode
Start

Event ID 1008: Activation.ModuleInitializationStop

#
Channel
Diagnostic
Task
Activation.ModuleInitialization
Opcode
Stop

Event ID 1009: Infrastructure.Host.SetupStart

#
Channel
Diagnostic
Task
Infrastructure.Host.Setup
Opcode
Start

Event ID 1010: Infrastructure.Host.SetupStop

#
Channel
Diagnostic
Task
Infrastructure.Host.Setup
Opcode
Stop

Event ID 1011: NavigationStart

#
Channel
Diagnostic
Task
Navigation
Opcode
Start

Fields #

NameDescription
ObjectWWA UInt64
Counter UInt32
PackageFullName UnicodeString
AppID UnicodeString
NavigationInfo HexInt32

Event ID 1012: NavigationStop

#
Channel
Diagnostic
Task
Navigation
Opcode
Stop

Fields #

NameDescription
ObjectWWA UInt64
Counter UInt32
PackageFullName UnicodeString
AppID UnicodeString
NavigationInfo HexInt32

Event ID 1015: Telemetry.WERReportingStart

#
Channel
Diagnostic
Task
Telemetry.WERReporting
Opcode
Start

Event ID 1016: Telemetry.WERReportingStop

#
Channel
Diagnostic
Task
Telemetry.WERReporting
Opcode
Stop

Event ID 1017: Infrastructure.Host.UptimeStart

#
Channel
Diagnostic
Task
Infrastructure.Host.Uptime
Opcode
Start

Event ID 1018: Infrastructure.Host.UptimeStop

#
Channel
Diagnostic
Task
Infrastructure.Host.Uptime
Opcode
Stop

Event ID 1019: ApplicationActivateEventStart

#
Channel
Diagnostic
Task
ApplicationActivateEvent
Opcode
Start

Fields #

NameDescription
PackageFullName UnicodeString
AppID UnicodeString
ContractID UnicodeString
IsReactivation UInt32

Event ID 1020: ApplicationActivateEventStop

#
Channel
Diagnostic
Task
ApplicationActivateEvent
Opcode
Stop

Fields #

NameDescription
PackageFullName UnicodeString
AppID UnicodeString
ContractID UnicodeString
IsReactivation UInt32

Event ID 1021: ApplicationTerminationStart

#
Channel
Diagnostic
Task
ApplicationTermination
Opcode
Start

Fields #

NameDescription
PackageFullName UnicodeString
AppID UnicodeString

Event ID 1022: ApplicationTerminationStop

#
Channel
Diagnostic
Task
ApplicationTermination
Opcode
Stop

Fields #

NameDescription
PackageFullName UnicodeString
AppID UnicodeString

Event ID 1023: SuspendingStart

#
Channel
Diagnostic
Task
Suspending
Opcode
Start

Event ID 1024: SuspendingStop

#
Channel
Diagnostic
Task
Suspending
Opcode
Stop

Event ID 1025: ResumingStart

#
Channel
Diagnostic
Task
Resuming
Opcode
Start

Event ID 1026: ResumingStop

#
Channel
Diagnostic
Task
Resuming
Opcode
Stop

Event ID 1027: Infrastructure.WebInstance.SetupStart

#
Channel
Diagnostic
Task
Infrastructure.WebInstance.Setup
Opcode
Start

Event ID 1028: Infrastructure.WebInstance.SetupStop

#
Channel
Diagnostic
Task
Infrastructure.WebInstance.Setup
Opcode
Stop

Event ID 1029: InputPanelShowStart

#
Channel
Diagnostic
Task
InputPanelShow
Opcode
Start

Event ID 1030: InputPanelShowStop

#
Channel
Diagnostic
Task
InputPanelShow
Opcode
Stop

Event ID 1031: InputPanelHideStart

#
Channel
Diagnostic
Task
InputPanelHide
Opcode
Start

Event ID 1032: InputPanelHideStop

#
Channel
Diagnostic
Task
InputPanelHide
Opcode
Stop

Event ID 1033: SuspendingSubDownloadsStart

#
Channel
Diagnostic
Task
SuspendingSubDownloads
Opcode
Start

Event ID 1034: SuspendingSubDownloadsStop

#
Channel
Diagnostic
Task
SuspendingSubDownloads
Opcode
Stop

Event ID 1035: TerminateAppStart

#
Channel
Diagnostic
Task
TerminateApp
Opcode
Start

Event ID 1036: TerminateAppStop

#
Channel
Diagnostic
Task
TerminateApp
Opcode
Stop

Event ID 1037: MswwaProtocol.AppDataToFileUriStart

#
Channel
Diagnostic
Task
MswwaProtocol.AppDataToFileUri
Opcode
Start

Event ID 1038: MswwaProtocol.AppDataToFileUriStop

#
Channel
Diagnostic
Task
MswwaProtocol.AppDataToFileUri
Opcode
Stop

Event ID 1039: EvaluatePackageStart

#
Channel
Diagnostic
Task
EvaluatePackage
Opcode
Start

Event ID 1040: EvaluatePackageStop

#
Channel
Diagnostic
Task
EvaluatePackage
Opcode
Stop

Event ID 1041: ResizeStart

#
Channel
Diagnostic
Task
Resize
Opcode
Start

Event ID 1042: ResizeStop

#
Channel
Diagnostic
Task
Resize
Opcode
Stop

Event ID 1043: ViewStateStart

#
Channel
Diagnostic
Task
ViewState
Opcode
Start

Event ID 1044: ViewStateStop

#
Channel
Diagnostic
Task
ViewState
Opcode
Stop

Event ID 1045: InputPanelResizeViewportStart

#
Channel
Diagnostic
Task
InputPanelResizeViewport
Opcode
Start

Event ID 1046: InputPanelResizeViewportStop

#
Channel
Diagnostic
Task
InputPanelResizeViewport
Opcode
Stop

Event ID 1047: SuspendingGarbageCollectionStart

#
Channel
Diagnostic
Task
SuspendingGarbageCollection
Opcode
Start

Event ID 1048: SuspendingGarbageCollectionStop

#
Channel
Diagnostic
Task
SuspendingGarbageCollection
Opcode
Stop

Event ID 1049: ThreadMrtInitializationStart

#
Channel
Diagnostic
Task
ThreadMrtInitialization
Opcode
Start

Event ID 1050: ThreadMrtInitializationStop

#
Channel
Diagnostic
Task
ThreadMrtInitialization
Opcode
Stop

Event ID 1051: Infrastructure.Host.HostModulesInitializationStart

#
Channel
Diagnostic
Task
Infrastructure.Host.HostModulesInitialization
Opcode
Start

Event ID 1052: Infrastructure.Host.HostModulesInitializationStop

#
Channel
Diagnostic
Task
Infrastructure.Host.HostModulesInitialization
Opcode
Stop

Event ID 1053: Infrastructure.Host.HostRunStart

#
Channel
Diagnostic
Task
Infrastructure.Host.HostRun
Opcode
Start

Event ID 1054: Infrastructure.Host.HostRunStop

#
Channel
Diagnostic
Task
Infrastructure.Host.HostRun
Opcode
Stop

Event ID 1055: Infrastructure.WebInstance.InitializeStart

#
Channel
Diagnostic
Task
Infrastructure.WebInstance.Initialize
Opcode
Start

Event ID 1056: Infrastructure.WebInstance.InitializeStop

#
Channel
Diagnostic
Task
Infrastructure.WebInstance.Initialize
Opcode
Stop

Event ID 1057: Infrastructure.WebInstance.DispatchStart

#
Channel
Diagnostic
Task
Infrastructure.WebInstance.Dispatch
Opcode
Start

Event ID 1058: Infrastructure.WebInstance.DispatchStop

#
Channel
Diagnostic
Task
Infrastructure.WebInstance.Dispatch
Opcode
Stop

Event ID 1059: Infrastructure.WebInstance.RunStart

#
Channel
Diagnostic
Task
Infrastructure.WebInstance.Run
Opcode
Start

Event ID 1060: Infrastructure.WebInstance.RunStop

#
Channel
Diagnostic
Task
Infrastructure.WebInstance.Run
Opcode
Stop

Event ID 1061: WinRTAsyncCallStart

#
Channel
Diagnostic
Task
WinRTAsyncCall
Opcode
Start

Fields #

NameDescription
Priority Int32
Id Pointer

Event ID 1062: WinRTAsyncCallStop

#
Channel
Diagnostic
Task
WinRTAsyncCall
Opcode
Stop

Fields #

NameDescription
Priority Int32
Id Pointer

Event ID 1063: MemoryStatsOnSuspend

#
Channel
Diagnostic
Task
MemoryStatsOnSuspend

Fields #

NameDescription
JSHeapSizeMB HexInt32
TotalWorkingSetMBandPrivateCommitMB HexInt32
PackageAgeS UInt32
AppID UnicodeString
PackageFullName UnicodeString

Event ID 1064: LayoutChangedStart

#
Channel
Diagnostic
Task
LayoutChanged
Opcode
Start

Event ID 1065: LayoutChangedStop

#
Channel
Diagnostic
Task
LayoutChanged
Opcode
Stop

Event ID 1066: ApplicationActivateEvent

#
Channel
Diagnostic
Task
ApplicationActivateEvent

Fields #

NameDescription
ToggleCount UInt32
ToggleDetail UInt32
PackageFullName UnicodeString
AppID UnicodeString

Event ID 1067: ByteCodeSourceMapping

#
Channel
Diagnostic
Task
ByteCodeSourceMapping

Fields #

NameDescription
FilePath UnicodeString

Event ID 1068: ByteCodeSourceMapping1068

#
Channel
Diagnostic
Task
ByteCodeSourceMapping

Fields #

NameDescription
FilePath UnicodeString

Event ID 1069: LeavingBackgroundStart

#
Channel
Diagnostic
Task
LeavingBackground
Opcode
Start

Event ID 1070: LeavingBackgroundStop

#
Channel
Diagnostic
Task
LeavingBackground
Opcode
Stop

Event ID 1071: EnteredBackgroundStart

#
Channel
Diagnostic
Task
EnteredBackground
Opcode
Start

Event ID 1072: EnteredBackgroundStop

#
Channel
Diagnostic
Task
EnteredBackground
Opcode
Stop

Event ID 1073: BackgroundActivatedStart

#
Channel
Diagnostic
Task
BackgroundActivated
Opcode
Start

Event ID 1074: BackgroundActivatedStop

#
Channel
Diagnostic
Task
BackgroundActivated
Opcode
Stop

Event ID 10000: SourceMessageId : Message.

#
Channel
ApplicationTracing
Task
ApplicationTracing.Error
Opcode
AppHostApplicationError

Message #

%6%10 : %11

Fields #

NameDescription
DisplayName UnicodeString
ApplicationName UnicodeString
AppUserModelId UnicodeString
PackageFullName UnicodeString
ProcessId Int32
Source UnicodeString
DocumentFile UnicodeString
Line Int32
Column Int32
MessageId Int32
Message UnicodeString

Event ID 10001: SourceMessageId : Message.

#
Channel
ApplicationTracing
Task
ApplicationTracing.Warning
Opcode
AppHostApplicationWarning

Message #

%6%10 : %11

Fields #

NameDescription
DisplayName UnicodeString
ApplicationName UnicodeString
AppUserModelId UnicodeString
PackageFullName UnicodeString
ProcessId Int32
Source UnicodeString
DocumentFile UnicodeString
Line Int32
Column Int32
MessageId Int32
Message UnicodeString

Event ID 10002: SourceMessageId : Message.

#
Channel
ApplicationTracing
Task
ApplicationTracing.Informational
Opcode
AppHostApplicationInformation

Message #

%6%10 : %11

Fields #

NameDescription
DisplayName UnicodeString
ApplicationName UnicodeString
AppUserModelId UnicodeString
PackageFullName UnicodeString
ProcessId Int32
Source UnicodeString
DocumentFile UnicodeString
Line Int32
Column Int32
MessageId Int32
Message UnicodeString

Event ID 10003: Suspending Deferral Increment.

#
Channel
ApplicationTracing
Task
ApplicationTracing.Informational
Opcode
AppHostApplicationInformation

Fields #

NameDescription
DeferralCount Int32

Event ID 10004: Suspending Deferral Decrement.

#
Channel
ApplicationTracing
Task
ApplicationTracing.Informational
Opcode
AppHostApplicationInformation

Fields #

NameDescription
DeferralCount Int32

Event ID 10005: Activation.CompleteActivationStart

#
Channel
Diagnostic
Task
Activation.CompleteActivation
Opcode
Start

Event ID 10006: Activation.CompleteActivationStop

#
Channel
Diagnostic
Task
Activation.CompleteActivation
Opcode
Stop

Event ID 10007: DrawingAppHostInformation

#
Channel
Internal
Task
Drawing
Opcode
AppHostInformation

Fields #

NameDescription
Value UnicodeString

Event ID 10009: NavigationStart10009

#
Channel
Diagnostic
Task
Navigation
Opcode
Start

Event ID 10010: NavigationStop10010

#
Channel
Diagnostic
Task
Navigation
Opcode
Stop

Provenance

ETW provider GUID 98e0765d-8c42-44a3-a57b-760d7f93225a

Defined in wwahost.exe, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB