Microsoft-Windows-AppModel-Exec
1115 events across 2 channels
Event ID 100: DepMgr: Removed suspension group from the graph, PsmKey=PsmKey.
#Event ID 101: Not set app PsmKey into halted state because it should wait for other apps in the package halted first.
#Event ID 102: Not set app PsmKey into halted state because other app in the package have not finished quiescing.
#Event ID 103: Not terminate app PsmKey, because target app AppPsmKey state = State.
#Event ID 104: Updated current dependency graph (Removal : Updated_current_dependency_graph_Removal) with Source Removal and Target SrcPsmKey for type TargetPsmKey in return Type.
#Event ID 105: Default time for ValueName overridden to Time ms.
#Event ID 107: Window HwndPointer is hung in foreground.
#Event ID 108: Window HwndPointer is no longer hung in foreground.
#Event ID 109: Waiting for WER reporting to finish on app PsmKey.
#Event ID 110: Hang reporting finished on app PsmKey.
#Event ID 111: Hung reporting finished on window Hwnd with result ErrorCode.
#Event ID 112: _SubmitActivationHangWerReport(start): Aumid=AUMID, PIDs=PID count=Count.
#Event ID 113: _SubmitActivationHangWerReport(stop): Aumid=AUMID, result=ErrorCode.
#Event ID 114: _UnregisterForStateChanges: fPackageLevel=PackageLevel, HRESULT is ErrorCode.
#Event ID 115: Application AUMID has successfully launched.
#Event ID 116: Canceled launch grace timer, PsmKey=PsmKey.
#Event ID 117: _InitializeLaunchGraceContext: Aumid=AUMID, fExtendedLaunch=Bool1, fEventExists=Bool2.
#Event ID 118: App AUMID successfully launched and its launch grace period expired: removing suspend exemption.
#Event ID 119: Forcefully terminating app, Aumid=AUMID flags=Flags, reason=Reason.
#Event ID 120: CheckTerminationBeforeSwitch: Should terminate: CheckTerminationBeforeSwitch_Should_terminate, Aumid=MaxTterminate, HRESULT=AUMID, reason=ErrorCode, fIsMisbehaving=Reason.
#Description
CheckTerminationBeforeSwitch: Should terminate: CheckTerminationBeforeSwitch_Should_terminate, Aumid=MaxTterminate, HRESULT=AUMID, reason=ErrorCode, fIsMisbehaving=Reason.
Message #
Fields #
| Name | Description |
|---|---|
MaxTterminate Boolean | |
AUMID UnicodeString | |
ErrorCode HexInt32 | |
Reason Int64 | |
Misbehaving Boolean |
Event ID 121: Termination requested for AUMID - flags Flags.
#Event ID 122: Failing TerminateApp due to pending task completions: PlmFlags.
#Event ID 123: Terminating AUMID immediately.
#Event ID 124: Uninstalling background work items for AUMID.
#Event ID 125: Termination of ValueName scheduled for Time ms in future.
#Event ID 126: Sent window message to the default immersive browser with HRESULT ErrorCode.
#Event ID 127: Attempting to terminate app AUMID prior to new app launch due to pending termination.
#Event ID 128: EvaluateAndTerminatePid: PID: EvaluateAndTerminatePid_PID.
#Event ID 129: Exempting application AUMID from suspend while it is being launched.
#Event ID 130: Exemption manager SuspendExemptionReason is requesting a higher minimum priority Priority for PsmKey.
#Event ID 131: Debug mode is enabled for PsmKey, so it will run at Priority priority.
#Event ID 132: Handling logoff, PsmKey will run at Priority priority.
#Event ID 133: Throttling has been disabled, so PsmKey will run at Priority priority.
#Event ID 134: Suspend denied due to new key debounce, PsmKey=PsmKey.
#Event ID 135: Suspend denied due to debug mode, PsmKey=PsmKey.
#Event ID 136: Not suspending application PsmKey due to exemption Exemption.
#Event ID 137: _EvaluateAndSuspendApplication: PsmKey=PsmKey, fIsSuspendAllowed=Bool, HRESULT=ErrorCode.
#Event ID 138: _ReevaluatePolicy: Ignoring debug mode app, PsmKey=PsmKey.
#Event ID 140: ManagePreExistingApps: PsmKey=PsmKey, Aumid=AUMID, hr=ErrorCode.
#Event ID 142: RequestSuspendTimeout called for application PsmKey and timeout TimeOut.
#Event ID 143: Debug mode enabled, PkgFamilyName=PackageFamilyName.
#Event ID 144: Debug mode disabled, PkgFamilyName=PackageFamilyName.
#Event ID 145: Set Package PackageFullName, Timeout to Time.
#Event ID 146: ResumeDebugModePackage(start): package=PackageFullName.
#Event ID 147: ResumeDebugModePackage(stop): package=PackageFullName, HRESULT=ErrorCode.
#Event ID 148: SuspendDebugModePackage(start): package=PackageFullName.
#Event ID 149: SuspendDebugModePackage(stop): package=PackageFullName, HRESULT=ErrorCode.
#Event ID 150: MultiAppSuspendAndTerminateSync(start): cPsmKeys=PsmKey, suspendTrigger=Trigger, terminateReason=Reason.
#Event ID 151: MultiAppSuspendAndTerminateSync(stop): cPsmKeys=PsmKey, suspendTrigger=Trigger, terminateReason=Reason, HRESULT=ErrorCode.
#Event ID 152: MultiPackageSuspendAndTerminateSync(start): cPsmKeys=PsmKey, suspendTrigger=Trigger, terminateReason=Reason.
#Event ID 153: MultiPackageSuspendAndTerminateSync(stop): cPsmKeys=PsmKey, suspendTrigger=Trigger, terminateReason=Reason, HRESULT=ErrorCode.
#Event ID 154: MultiPackageSuspendAndPendTerminateSync(start): cPsmKeys=PsmKey, suspendTrigger=Trigger, terminateReason=Reason.
#Event ID 155: MultiPackageSuspendAndPendTerminateSync(stop): cPsmKeys=PsmKey, suspendTrigger=Trigger, terminateReason=Reason, HRESULT=ErrorCode.
#Event ID 156: TerminateSync(start): PsmKey=PsmKey, type=Type, reason=Reason.
#Event ID 157: TerminateSync(stop): PsmKey=PsmKey, hrLogReason=LogErrorCode, hrTermination=TerminationErrorCode.
#Event ID 158: TerminatePackageSync(start): Package=PackageFullName, type=Type, reason=Reason.
#Event ID 159: TerminatePackageSync(stop): Package=PackageFullName, fPlmKnowsPackage=plmKnowsPackage, HRESULT=ErrorCode.
#Event ID 160: _TerminateAllSuspendedApplications(start)
#Description
_TerminateAllSuspendedApplications(start).
Message #
Event ID 161: _TerminateAllSuspendedApplications(stop): HRESULT=ErrorCode.
#Event ID 162: Application PsmKey is blocking Connected Standby.
#Event ID 164: All packages have been suspended or terminated.
#Event ID 165: Kernel State Change Callback: There were PidCount PIDs present in the callback data.
#Event ID 166: Kernel State Change Callback: The state source was StateSource.
#Event ID 167: PDC_CONTROL_ABORT: PdcNotificationClientAcknowledge(STATUS_SUCCESS) returned ErrorCode.
#Event ID 168: Not terminating application AUMID in _EvaluateAndTerminateApplication because it contains a running IImmersiveApplication.
#Event ID 169: Not terminating application AUMID in _EvaluateAndTerminateApplication because it is a long running app.
#Event ID 170: Not terminating application PsmKey in _EvaluateAndTerminateApplication due to pending task completion.
#Event ID 171: Not terminating application PsmKey in _EvaluateAndTerminateApplication due to Launch Grace.
#Event ID 172: Not terminating application PsmKey in _EvaluateAndTerminateApplication due to debug mode.
#Event ID 173: Not terminating application PsmKey in _EvaluateAndTerminateApplication due to application had already been terminated.
#Event ID 174: _EvaluateAndTerminateApplication: Skipping child suspension group, PsmKey=PsmKey.
#Event ID 175: An empty application was detected.
#Event ID 176: Parent allowed suspension for child app, childPsmKey=PsmKey.
#Event ID 177: GroupChildWithParent: ChildPsmKey=PsmKey, HRESULT=ErrorCode.
#Event ID 178: Call a command line 'CommandLine' to notify default browser with result ErrorCode.
#Event ID 179: Read executable path from registry with result ErrorCode.
#Event ID 180: Application PsmKey was added to PLM Data Store and registering for PSM notification.
#Event ID 181: Resume the PPLE app PsmKey when receiving the PSM new key notification.
#Event ID 182: An orphaned prereq application was detected.
#Event ID 183: Not terminating dependent application AUMID in _EvaluateAndTerminateDependentApplication due other dependency applications.
#Event ID 184: _EvaluateAndTerminateSourceApplication: Aumid=AUMID, exemption=Exemption.
#Event ID 185: An force termination exemption Application was detected.
#Event ID 186: StateMgr: State queued, PsmKey=PsmKey, state=State, HRESULT=ErrorCode.
#Event ID 187: StateMgr: OnApplicationStarted set to active, PsmKey=PsmKey.
#Event ID 188: StateMgr: OnApplicationStarted finished, PsmKey=PsmKey, HRESULT=ErrorCode.
#Event ID 189: StateMgr: App's current state has changed, PsmKey=PsmKey, state=State.
#Event ID 190: StateMgr: OnApplicationTerminated(start), PsmKey=PsmKey.
#Event ID 191: StateMgr: Application terminated signaled, PsmKey=PsmKey.
#Event ID 192: StateMgr: OnApplicationTerminated(stop), PsmKey=PsmKey.
#Event ID 193: StateMgr: GetTerminateSyncData, PsmKey=PsmKey, hr=ErrorCode.
#Event ID 194: StateMgr: _ProcessStateQueue(start): PsmKey=PsmKey, state=State.
#Event ID 195: StateMgr: _ProcessStateQueue(stop): PsmKey=PsmKey, state=State, HRESULT=ErrorCode.
#Event ID 196: StateMgr: Queue's pause state has changed to Bool, PsmKey=PsmKey.
#Event ID 197: StateMgr: App's committed state has changed, PsmKey=PsmKey, state=State.
#Event ID 198: Enabling debug mode on package PackageFullName.
#Event ID 199: Disabling debug mode on package PackageFullName.
#Event ID 200: Suspending package PackageFullName via debug API.
#Event ID 201: Resuming package PackageFullName via debug API.
#Event ID 202: Terminating package PackageFullName via debug API.
#Event ID 203: Default time for ValueName overridden to Timeout ms.
#Event ID 204: ReportActivationHangSync: Halt application Aumid=AUMID, result=ErrorCode.
#Event ID 205: _SubmitActivationHangWerReport(start): Aumid=AUMID, PIDs=PID count=Count.
#Event ID 206: _SubmitActivationHangWerReport(stop): Aumid=AUMID canceled(Canceled) result=Count.
#Event ID 207: PLM doesn't swap out application PsmKey due to its swap state State.
#Event ID 208: PLM termination policy started on background thread because application PsmKey failed to outswap.
#Event ID 209: PLM termination policy finished.
#Event ID 210: PLM memory policy will be aggressive because this is a disconnected session
#Description
PLM memory policy will be aggressive because this is a disconnected session.
Message #
Event ID 213: PLM termination policy triggered by in use memory of MemorySize MiB.
#Event ID 214: PLM termination policy triggered by commit charge of MemorySize MiB.
#Event ID 215: MemoryPolicyWatcherTerminateCommitCharge
#Event ID 216: PLM empty policy triggered by in use memory of MemorySize MB.
#Event ID 217: PLM memory policy does not allow termination of application PsmKey for reason Exemption.
#Event ID 218: PLM memory policy allows termination of application PsmKey.
#Event ID 219: Application PsmKey was hidden Time seconds ago.
#Event ID 220: Application PsmKey is the clipboard owner.
#Event ID 222: PLM empty policy ignoring application PsmKey with error code ErrorCode.
#Event ID 223: PLM empty policy finished after emptying MemorySize MiB.
#Event ID 224: PLM termination policy enumerated ApplicationCouunt applications.
#Event ID 225: PLM memory policy chose application PsmKey as its termination candidate, over old candidate application OldPsmKey.
#Event ID 226: PLM memory policy will terminate application PsmKey with memory size MemorySize MiB and score Score.
#Event ID 227: PLM memory policy received MemWatcher event
#Description
PLM memory policy received MemWatcher event.
Message #
Event ID 228: PLM memory policy received MemWatcher event
#Event ID 229: Package exemption manager denied suspend for PsmKey.
#Event ID 230: Package Exemption Manager: ReferenceAdded:Package_Exemption_Manager_ReferenceAdded, Added ref to application Type.
#Description
Package Exemption Manager: ReferenceAdded:Package_Exemption_Manager_ReferenceAdded, Added ref to application Type. The ref counts are now LAUNCH=PsmKey, PSMREG=Exemption, and PSMREGPENDING=RegistrationRef.
Message #
Fields #
| Name | Description |
|---|---|
Added Boolean | |
Type Int32 | |
PsmKey UnicodeString | |
Exemption UInt32 | |
RegistrationRef UInt32 | |
PendingRef UInt32 |
Event ID 231: Package PackageFamilyName added to the package data store.
#Event ID 232: Resetting priority to unpause the suspension group, PsmKey=PsmKey.
#Event ID 233: Changed the priority of PsmKey to Priority.
#Event ID 234: AllowServiceOfPackages(start): cPackages=PackageCount, fNotifyBi=Notify.
#Event ID 235: AllowServiceOfPackages(stop): HRESULT=ErrorCode.
#Event ID 236: FinishedServiceOfPackages(start): cPackages=PackageCount.
#Event ID 237: FinishedServiceOfPackages(stop): HRESULT=ErrorCode.
#Event ID 238: AllowUninstallOfPackage(start): package=PackageFullName.
#Event ID 239: AllowUninstallOfPackage(stop): package=PackageFullName, HRESULT=ErrorCode.
#Event ID 240: Forcefully terminating misbehaving app AUMID due to activation failure ErrorCode.
#Event ID 241: App ApplicationName: Change = Echange.
#Event ID 242: PsmKey PsmKey has state State.
#Event ID 243: Changing app state through BI, PsmKey=PsmKey, state=State terminate action=TerminateAction.
#Event ID 244: Changing the package state of PackageFullName through BI to State.
#Event ID 245: OnAfterQuiescing: Quiesce began for PsmKey=PsmKey, suspendTrigger=Trigger.
#Event ID 246: _CompleteQuiesceHelper: Queued termination for timed-out PsmKey PsmKey.
#Event ID 247: Quiesce completed for PsmKey=PsmKey, reason=Reason, suspendTrigger=SuspendTrigger.
#Event ID 248: Suspend trigger updated for PsmKey=PsmKey, suspendTrigger=SuspendTrigger.
#Event ID 249: ExtendQuiesceTimeout: PsmKey=PsmKey, request=Timeout ms, HRESULT=ErrorCode.
#Event ID 250: _CompleteQuiesceHelper: Ignore timed-out PsmKey PsmKey as is being debugged.
#Event ID 251: ResumeHelper: Application resume(start), PsmKey=PsmKey, reason=ResumeReason.
#Event ID 252: ResumeHelper: Application resume(stop), PsmKey=PsmKey, reason=ResumeReason, HRESULT=ErrorCode.
#Event ID 253: Resume reason updated for PsmKey=PsmKey, reason=ResumeReason.
#Event ID 254: RPC 0->1 transition detected for PsmKey.
#Event ID 255: RPC exemption was granted for application Runaway_RPC.
#Event ID 256: RPC debounce received for package PsmKey.
#Event ID 257: Application AUMID has successfully launched.
#Event ID 258: Application PsmKey termination is blocked.
#Event ID 259: PdcSystem activation (Activate = fActivate).
#Event ID 260: NetworkAudio entries: NetworkAudio_entries, IsNetworkReferenced: IsNetworkReferenced.
#Event ID 261: App PsmKey is Sharing.
#Event ID 262: Share Guid has started in app PsmKey.
#Event ID 263: Share Guid in app PsmKey has stopped.
#Event ID 264: Queued termination reason updated for PsmKey=PsmKey, reason=Reason.
#Event ID 265: ClearTerminationTypesForForgottenPackage(start): PkgFamilyName=PackageFamilyName.
#Event ID 266: Cleared termination type for forgotten app, Aumid=AUMID, HRESULT=ErrorCode.
#Event ID 267: ClearTerminationTypesForForgottenPackage(stop): PkgFamilyName=PackageFamilyName, HRESULT=ErrorCode.
#Event ID 268: Writing to termination type reg key for Aumid=AUMID, type=Type, HRESULT=ErrorCode.
#Event ID 269: Reading termination type reg key for Aumid=AUMID, type=Type, HRESULT=ErrorCode.
#Event ID 270: _ExtendForResourceStarvation: PsmKey=PsmKey, TimerType=Type, newRelativeExpirationTimeMs=NewRelativeExpirationTimer, ElapsedMs=ElapsedMs, CpuRunningMs=CpuRunning, CpuReadyMs=CpuReady, IoNormalMs=Io...
#Description
_ExtendForResourceStarvation: PsmKey=PsmKey, TimerType=Type, newRelativeExpirationTimeMs=NewRelativeExpirationTimer, ElapsedMs=ElapsedMs, CpuRunningMs=CpuRunning, CpuReadyMs=CpuReady, IoNormalMs=IoNormal.
Message #
Fields #
| Name | Description |
|---|---|
PsmKey UnicodeString | |
Type Int32 | |
NewRelativeExpirationTimer UInt64 | |
ElapsedMs UInt64 | |
CpuRunning UInt64 | |
CpuReady UInt64 | |
IoNormal UInt64 |
Event ID 271: Foreground resume delay Time milliseconds.
#Event ID 272: Suspend allowed for PsmKey - Session not active.
#Event ID 273: Suspend denied due to a visible window or visibility debounce, PsmKey=PsmKey.
#Event ID 274: Suspend denied for PsmKey - UserRequest non-zero.
#Event ID 275: Suspend denied for PsmKey- failure Status.
#Description
Suspend denied for PsmKey- failure Status.
Message #
Fields #
| Name | Description |
|---|---|
PsmKey UnicodeString | |
Status HexInt32 | NTSTATUS reference |
Event ID 276: OnWindowChanged: Aumid=AUMID, Hwnd=Hwnd, change=WindowChange, fDeferredVisibility=DeferredVisibility, HRESULT=ErrorCode.
#Event ID 280: PlmGetPackageFullNameFromAppId, Aumid=AUMID, HRESULT=ErrorCode.
#Event ID 281: Session idle state change -- calling _ReevaluatePolicy
#Description
Session idle state change -- calling _ReevaluatePolicy.
Message #
Event ID 282: RegisterForActivationStateChanges: Act:RegisterForActivationStateChanges_Act App:App HRESULT is ActivationType.
#Event ID 283: UnregisterForActivationStateChanges: Cookie is Cookie.
#Event ID 284: Can Auto Terminate app AUMID Bool.
#Event ID 285: TerminateApplicationBeforeActivation(start): Aumid=AUMID.
#Event ID 286: TerminateApplicationBeforeActivation: wait for terminate, Aumid=AUMID, HRESULT=ErrorCode.
#Event ID 287: TerminateApplicationBeforeActivation(stop): Aumid=Aumid, reason=Reason, HRESULT=ErrorCode.
#Event ID 288: s_SuspendPackagesAtLogOff(start)
#Description
s_SuspendPackagesAtLogOff(start).
Message #
Event ID 289: s_SuspendPackagesAtLogOff(stop): HRESULT=ErrorCode.
#Event ID 290: StateMgr: OnApplicationStarted still halted, PsmKey=PsmKey.
#Event ID 291: Added Task Completion under Category for application PsmKey.
#Event ID 292: Removed Task Completion under Category for application PsmKey.
#Event ID 293: Illegal state change happened to App: PsmKey.
#Event ID 294: EnableDebugMode failed: EnableDebugMode_failed.
#Event ID 295: DisableDebugMode: RoDisableDebuggingForPackage failed with result ErrorCode.
#Event ID 296: DisableDebugMode: OnDebugModeDisabled failed with result ErrorCode.
#Event ID 297: DisableDebugMode: Enabling activation timeout failed with result ErrorCode.
#Event ID 298: DisableDebugMode failed: DisableDebugMode_failed.
#Event ID 299: Couldn't open process: Couldnt_open_process.
#Event ID 300: PLM failed to process a hang for window Hwnd with error code ErrorCode.
#Event ID 301: PLM outswap application PsmKey failed to invoke with error code ErrorCode.
#Event ID 302: PLM couldn't find any process for application PsmKey, and handle it as non-large app.
#Event ID 303: PLM failed to decide application PsmKey is large or not with error code ErrorCode.
#Event ID 304: PLM empty policy failed to process application PsmKey with error code ErrorCode.
#Event ID 305: PLM empty policy failed to empty application PsmKey with error code ErrorCode.
#Event ID 306: PLM failed to terminate application PsmKey as empty policy with error code ErrorCode.
#Event ID 307: PLM empty policy failed to enumerate applications with error code ErrorCode.
#Event ID 308: PLM termination policy skipping application PsmKey, which is not registered with PLM.
#Event ID 309: PLM memory policy failed to queue work with error code ErrorCode.
#Event ID 310: GetPackageData called on a Package PackageFamilyName, which is not in the PLM Package Data Store.
#Event ID 311: ERROR: Failed to set priority to Priority, PsmKey=PsmKey, NTSTATUS=Status.
#Description
ERROR: Failed to set priority to Priority, PsmKey=PsmKey, NTSTATUS=Status.
Message #
Fields #
| Name | Description |
|---|---|
Priority UInt32 | |
PsmKey UnicodeString | |
Status Int32 | NTSTATUS reference |
Event ID 312: AllowServiceOfPackages: Failed to terminate package=PackageFullName, type=Type, HRESULT=ErrorCode.
#Event ID 313: _CheckServicingPackages: Failed to enumerate app, PsmKey=PsmKey, HRESULT=ErrorCode.
#Event ID 314: _CheckServicingPackages: Failed to enumerate package, PkgFullName=PackageFullName, HRESULT=ErrorCode.
#Event ID 315: GetImmersiveApplicationCount failed with error code ErrorCode.
#Event ID 316: Background workitems were force terminated, PsmKey=PsmKey.
#Event ID 317: ChangeApplicationBiState failed: ChangeApplicationBiState_failed.
#Event ID 318: Background workitems for package PackageFullName were force terminated.
#Event ID 319: ChangePackageBiState failed: ChangePackageBiState_failed.
#Event ID 320: ApplicationProcesses failed to track process ID ProcessId with error code ErrorCode.
#Event ID 321: OnBeforeQuiescing: Failed to allocate memory for PsmKey=PsmKey, suspendTrigger=SuspendTrigger, HRESULT=ErrorCode.
#Event ID 322: OnAfterQuiescing: Quiesce failed for PsmKey=PsmKey, suspendTrigger=SuspendTrigger, HRESULT=ErrorCode.
#Event ID 323: ERROR: _CompleteQuiesceHelper: Failed to terminate timed-out PsmKey PsmKey with result ErrorCode.
#Event ID 324: ERROR: QuiesceHelper: App forgotten while still Quiescing, PsmKey=PsmKey, suspendTrigger=SuspendTrigger.
#Event ID 325: Failed to query the wake counters associated with application PsmKey.
#Description
Failed to query the wake counters associated with application PsmKey. NTSTATUS: Status.
Message #
Fields #
| Name | Description |
|---|---|
PsmKey UnicodeString | |
Status HexInt32 | NTSTATUS reference |
Event ID 326: _AllAppSyncOperationHelper: Failed to allocate memory for PsmKey=PsmKey, HRESULT=ErrorCode.
#Event ID 327: _MultiAppSyncOperationHelper: Failed to perform operation on PsmKey=PsmKey, HRESULT=ErrorCode.
#Event ID 328: _MultiAppSyncOperationHelper: Failed in wait, HRESULT=ErrorCode.
#Event ID 329: _MultiPackageSyncOperationHelper: Failed to enumerate PsmKey=PsmKey, HRESULT=ErrorCode.
#Event ID 330: _MultiPackageSyncOperationHelper: Failed to find package in data store, PkgFullName=1%, HRESULT=ErrorCode.
#Event ID 331: Failed to suspend and terminate apps, cPsmKeys=Template_PsmkeyCount.
#Event ID 332: Could not initialize an extended launch grace period for app AUMID with HRESULT ErrorCode -- falling back to normal launch grace.
#Event ID 333: App AUMID failed to show a window after launch.
#Event ID 334: Failed to get a window for an app; assuming that the app's window is not hung, Aumid=AUMID, HRESULT=Hwnd.
#Event ID 335: Failed to query hidden time for visibility debounce for app AUMID with error code ErrorCode.
#Event ID 336: _StartNewKeyDebounce: Error Result=ErrorCode, PsmKey=PsmKey.
#Event ID 337: StartTrackingNewApp failed with ErrorCode.
#Event ID 338: ERROR: Failed to enumerate exemption targets starting from PsmKey=PsmKey.
#Event ID 339: Failed to enumerate existing applications from PSM with error code ErrorCode.
#Event ID 340: PsmRegisterApplicationNotification failed for application PsmKey with status Status.
#Description
PsmRegisterApplicationNotification failed for application PsmKey with status Status. PLM's cache says that the application's registration is: Registered.
Message #
Fields #
| Name | Description |
|---|---|
PsmKey UnicodeString | |
Status HexInt32 | NTSTATUS reference |
Registered Boolean |
Event ID 341: ERROR: Failed to enumerate force termination targets starting from PsmKey=PsmKey, HRESULT=ErrorCode.
#Event ID 342: Application PsmKey failed to be added in PLM Data Store.
#Event ID 343: Failed to initialize string to send app notification Aumid state State.
#Event ID 344: Failed to initialize string to remove app PsmKey.
#Event ID 345: Failed to add Category for application PsmKey.
#Event ID 347: Task completion manager failed to add PID to its sharing cache with error code ErrorCode.
#Event ID 348: ClearTerminationTypesForForgottenPackage: Failed to clear termination type for app, Aumid=AUMID, HRESULT=ErrorCode.
#Event ID 349: ERROR: Failed to schedule the visibility debounce, PsmKey=PsmKey, HRESULT=ErrorCode.
#Event ID 350: OnWindowChanged ERROR: Failed to queue thread for Aumid=AUMID, Hwnd=Hwnd, change=WindowChange, HRESULT=DeferredVisibility.
#Event ID 351: ERROR: Failed to schedule deferred visibility timer, PsmKey=PsmKey, HRESULT=ErrorCode.
#Event ID 352: WaitOnBiNotifyNewSession HRBiNotifyNewSession=p1_UInt32 HRBiNotifyNewUser=p2_UInt32.
#Event ID 353: RegisterKernelNotifications HRESULT=p1_UInt32.
#Event ID 354: TCExemptionManager CompleteInitialization HRESULT=p1_UInt32.
#Event ID 355: PlmActivationManager CompleteInitialization HRESULT=p1_UInt32.
#Event ID 356: Plm CSDiagnostics CompleteInitialization HRESULT=p1_UInt32.
#Event ID 357: Plm LogOff/LogOn Registration HRESULT=p1_UInt32.
#Event ID 505: BM: Queued evaluate WorkItem: BM_Queued_evaluate_WorkItem EventType: EventType Action: Action PsmKey: PsmKey HostJobType: HostJobType EntryPoint: EntryPoint.
#Description
BM: Queued evaluate WorkItem: BM_Queued_evaluate_WorkItem EventType: EventType Action: Action PsmKey: PsmKey HostJobType: HostJobType EntryPoint: EntryPoint.
Message #
Fields #
| Name | Description |
|---|---|
PsmKey UnicodeString | |
HostJobType UInt32 | |
WorkItemId GUID | |
EntryPoint UnicodeString | |
EventType UInt32 | |
ActivationAction UInt32 |
Event ID 506: BM: Evaluate returned WorkItem: BM_Evaluate_returned_WorkItem EventType: EventType Action: Action PsmKey: PsmKey HostJobType: HostJobType EntryPoint: EntryPoint.
#Description
BM: Evaluate returned WorkItem: BM_Evaluate_returned_WorkItem EventType: EventType Action: Action PsmKey: PsmKey HostJobType: HostJobType EntryPoint: EntryPoint.
Message #
Fields #
| Name | Description |
|---|---|
PsmKey UnicodeString | |
HostJobType UInt32 | |
WorkItemId GUID | |
EntryPoint UnicodeString | |
EventType UInt32 | |
ActivationAction UInt32 |
Event ID 507: BM: TaskActivated WorkItem: BM_TaskActivated_WorkItem Instance: Instance.
#Event ID 508: BM: TaskCompleted WorkItem: BM_TaskCompleted_WorkItem Instance: Instance.
#Event ID 509: BM: TaskCanceled WorkItem: BM_TaskCanceled_WorkItem Instance: Instance.
#Event ID 510: BM: Policy evaluate returned WorkItem: BM_Policy_evaluate_returned_WorkItem EventType: EventType Action: Action WallClockLimit: WallClockLimit PsmKey: PsmKey HostJobType: HostJobType.
#Description
BM: Policy evaluate returned WorkItem: BM_Policy_evaluate_returned_WorkItem EventType: EventType Action: Action WallClockLimit: WallClockLimit PsmKey: PsmKey HostJobType: HostJobType.
Message #
Fields #
| Name | Description |
|---|---|
PsmKey UnicodeString | |
HostJobType UInt32 | |
WorkItemId GUID | |
EventType UInt32 | |
ActivationAction UInt32 | |
WallClockLimitMs UInt32 |
Event ID 511: BM: TaskActivating WorkItem: BM_TaskActivating_WorkItem Instance: Instance.
#Event ID 512: BM: Enter String.
#Event ID 513: BM: Exit String, HR=HRESULT.
#Event ID 514: BM: TerminateHost WorkItem: BM_TerminateHost_WorkItem.
#Event ID 515: BM: ResourceSet invalidated for WorkItem: WorkItemId Instance: TaskInstanceId.
#Event ID 516: BM: OnAcquired ignoring invalid CallbackId (CallbackId).
#Event ID 517: BM: TryAcquireResourceSet returning HR='HRESULT' PsmKey='String'; WorkItemId='WorkItemId;' CallbackId='CallBackId'.
#Event ID 518: BM: TryAcquireHostResourceSet returning HR='HRESULT' PsmKey='String'.
#Event ID 519: BM: OnApplicationStateChanged returning State='AppState' PsmKey='ApplicationId' HR='HRESULT'.
#Event ID 520: BM: OnAcquired received for CallbackId: CallbackId.
#Event ID 521: BM: OnAcquired request ignored for CallbackId: CallbackId.
#Event ID 522: BM: ActivateDeferredWorkItem WorkItem: BM_ActivateDeferredWorkItem_WorkItem.
#Event ID 523: BM: ActivateDeferredWorkItem discarded WorkItem: WorkItemId because of Status: Status.
#Description
BM: ActivateDeferredWorkItem discarded WorkItem: WorkItemId because of Status: Status.
Message #
Fields #
| Name | Description |
|---|---|
WorkItemId GUID | |
Status Int32 | NTSTATUS reference |
Event ID 524: BM: Enter String WorkItem: WorkItemId.
#Event ID 525: BM: Enter TaskInstanceId WorkItem: String TaskInstanceId: WorkItemId.
#Event ID 526: BM: Exit String.
#Event ID 527: BM: Failed to load settings for event String.
#Event ID 528: BM: Failed to load settings for event String with error HRESULT.
#Event ID 529: BM: Failed to load policy for CLSID: PolicyCLSID, for EventType EventType with error HRESULT.
#Event ID 530: BM: Failed to load the policies with error HRESULT.
#Event ID 531: BM: Evaluate returned WorkItem: BM_Evaluate_returned_WorkItem EventType: EventType WallClockLimit: WallClockLimit PsmKey: PsmKey HostJobType: HostJobType EntryPoint: EntryPoint.
#Description
BM: Evaluate returned WorkItem: BM_Evaluate_returned_WorkItem EventType: EventType WallClockLimit: WallClockLimit PsmKey: PsmKey HostJobType: HostJobType EntryPoint: EntryPoint.
Message #
Fields #
| Name | Description |
|---|---|
PsmKey UnicodeString | |
HostJobType UInt32 | |
WorkItemId GUID | |
EntryPoint UnicodeString | |
EventType UInt32 | |
WallClockLimitMs UInt32 |
Event ID 532: BM: TaskWallClockActive WorkItem: BM_TaskWallClockActive_WorkItem Instance: Instance.
#Event ID 533: BM: TaskWallClockExpired WorkItem: BM_TaskWallClockExpired_WorkItem Instance: Instance.
#Event ID 534: BM: Policy returned HRESULT: BM_Policy_returned_HRESULT for WorkItem: for_WorkItem PsmKey: PsmKey.
#Event ID 535: BM: Canceling task for high energy usage PsmKey: PsmKey WorkItem: WorkItemId.
#Event ID 536: BM: Ignoring cancelation request (whitelisted) for high energy usage PsmKey: PsmKey WorkItem: WorkItemId.
#Event ID 537: BM: Session(SessionId) started, session initialization returned HRESULT.
#Event ID 538: BM: Session(SessionId) ended.
#Event ID 539: BM: Activation ignored due to no Session(WorkItem): PsmKey: SessionId WorkItem: PsmKey.
#Event ID 540: BM: Failed to acquire a ResourceSet for WorkItem: WorkItemId with error HRESULT.
#Event ID 541: BM: WorkItem: BM_WorkItem is being debugged.
#Event ID 542: BM: EvaluateActivationAction for WorkItem: WorkItemId HRESULT: HRESULT.
#Event ID 543: BM: Skipped Buffering Exempted task with SQMId: SqmId PsmKey: PsmKey.
#Event ID 544: BM: Dropped Exempted task that came before SessionReady with SQMId: SqmId PsmKey: PsmKey.
#Event ID 545: BM: Activation ignored due to no User(WorkItem): PsmKey: UserSid WorkItem: PsmKey.
#Event ID 546: BM: User Logon Session: BM_User_Logon_Session User: User HRESULT: HRESULT.
#Event ID 547: BM: User Logoff Session: BM_User_Logoff_Session User: User HRESULT: HRESULT.
#Event ID 548: BM: Pending activation discarded for work item (WorkItemId).
#Event ID 549: BM: Flushing ignored EvaluationState: BM_Flushing_ignored_EvaluationState for WorkItem: for_WorkItem.
#Event ID 550: BM: Flushing buffered activations.
#Description
BM: Flushing buffered activations.
Message #
Event ID 551: BM: Global Policy evaluate returned WorkItem: WorkItemId EventType: EventType Action: ActivationAction WallClockLimit: WallClockLimitMs PsmKey: PsmKey HostJobType: HostJobType.
#Description
BM: Global Policy evaluate returned WorkItem: WorkItemId EventType: EventType Action: ActivationAction WallClockLimit: WallClockLimitMs PsmKey: PsmKey HostJobType: HostJobType.
Message #
Fields #
| Name | Description |
|---|---|
PsmKey UnicodeString | |
HostJobType UInt32 | |
WorkItemId GUID | |
EventType UInt32 | |
ActivationAction UInt32 | |
WallClockLimitMs UInt32 |
Event ID 552: BM: A Session object for Session(SessionId) already exists.
#Event ID 553: BM: ShellSuspendState changed, oldState: BM_ShellSuspendState_changed_oldState newState: newState.
#Event ID 554: BM: DPLKeyState changed, oldState: BM_DPLKeyState_changed_oldState newState: newState.
#Event ID 555: BM: Canceling WorkItem: BM_Canceling_WorkItem due to DPL policy.
#Event ID 556: BM: Dropping activation for WorkItem: WorkItemId due to DPL policy.
#Event ID 557: BM: Buffered activation for WorkItem: WorkItemId due to Shell Ready policy.
#Event ID 558: BM: Exempted activation for WorkItem: WorkItemId due to Shell Ready policy.
#Event ID 559: BM: Buffered activation for WorkItem: WorkItemId due to Thermal Throttling policy.
#Event ID 600: AM: Failed to read activation plugin registry with error code HRESULT.
#Event ID 601: AM: Failed to CoCreate activation plugin with error code HRESULT and CLSID PluginClsid.
#Event ID 602: AM: Successfully created activation plugin with CLSID PluginClsid from the registry.
#Event ID 603: AM: Failed to register package if needed with error HRESULT.
#Event ID 604: AM: Failed trying to register package by family name async during activation with error HRESULT.
#Event ID 605: AM: Failed trying to wait for the completion of the register package by family async during activation with error HRESULT.
#Event ID 700: BAM: Added Package: BAM_Added_Package UserSid: UserSid.
#Event ID 701: BAM: Removed Package: BAM_Removed_Package UserSid: UserSid.
#Event ID 702: BAM: Added Application: BAM_Added_Application UserSid: UserSid.
#Event ID 703: BAM: Removed Application: BAM_Removed_Application UserSid: UserSid.
#Event ID 704: BAM: AccessState Changed for Package: Package OldState: Old_AccessState NewState: New_AccessState UserSid: UserSid.
#Event ID 705: BAM: BackgroundExecutionManager::RequestAccessAsync called for Application: AppUserModelId Returned_AccessState: Returned_AccessState.
#Event ID 706: BAM: BackgroundExecutionManager::GetStatus called for Application: AppUserModelId Returned_AccessState: Returned_AccessState.
#Event ID 707: BAM: BackgroundExecutionManager::RemoveAccess called for Application: AppUserModelId.
#Event ID 708: BAM: Sanitizing data for package: PackageFullName HRESULT: HRESULT.
#Event ID 709: BAM: ReregisteredPackage called during _SanitizeStore for package: PackageFullName HRESULT: HRESULT.
#Event ID 710: BAM: UnregisterPackage called during _SanitizeStore for package: PackageFullName HRESULT: HRESULT.
#Event ID 711: BAM: BackgroundExecutionManager::RequestAccessKindAsync called for Application: AppUserModelId Requested_AccessKind: Requested_AccessKind Returned: Returned.
#Event ID 712: Background Access State For User Modified CallerUserSid = CallerUserSid CallerProcessName = CallerProcessName CallerPackageFamilyName = CallerPackageFamilyName OldConsentValue = OldConsentValue New...
#Description
Background Access State For User Modified CallerUserSid = CallerUserSid CallerProcessName = CallerProcessName CallerPackageFamilyName = CallerPackageFamilyName OldConsentValue = OldConsentValue NewConsentValue = NewConsentValue IsSetByHigherAuthority = IsSetByHigherAuthority EffectiveConsentValue = EffectiveConsentValue TargetUserSid = TargetUserSid HRESULT = HRESULT
Message #
Fields #
| Name | Description |
|---|---|
CallerUserSid UnicodeString | |
CallerProcessName UnicodeString | |
CallerPackageFamilyName UnicodeString | |
OldConsentValue UInt32 | |
NewConsentValue UInt32 | |
IsSetByHigherAuthority Boolean | |
EffectiveConsentValue UInt32 | |
TargetUserSid UnicodeString | SID of the target account. |
HRESULT UInt32 |
Event ID 713: Background Access State For Package Modified CallerUserSid = CallerUserSid CallerProcessName = CallerProcessName CallerPackageFamilyName = CallerPackageFamilyName OldConsentValue = OldConsentValue ...
#Description
Background Access State For Package Modified CallerUserSid = CallerUserSid CallerProcessName = CallerProcessName CallerPackageFamilyName = CallerPackageFamilyName OldConsentValue = OldConsentValue NewConsentValue = NewConsentValue IsSetByHigherAuthority = IsSetByHigherAuthority EffectiveConsentValue = EffectiveConsentValue TargetUserSid = TargetUserSid TargetPackageFamilyName = TargetPackageFamilyName HRESULT = HRESULT
Message #
Fields #
| Name | Description |
|---|---|
CallerUserSid UnicodeString | |
CallerProcessName UnicodeString | |
CallerPackageFamilyName UnicodeString | |
OldConsentValue UInt32 | |
NewConsentValue UInt32 | |
IsSetByHigherAuthority Boolean | |
EffectiveConsentValue UInt32 | |
TargetUserSid UnicodeString | SID of the target account. |
TargetPackageFamilyName UnicodeString | |
HRESULT UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-AppModel-Exec",
"guid": "EB65A492-86C0-406A-BACE-9912D595BD69",
"event_source_name": "",
"event_id": 713,
"version": 0,
"level": 4,
"task": 73,
"opcode": 0,
"keywords": 9223407221226864640,
"time_created": "2023-11-05T22:56:17.831960+00:00",
"event_record_id": 163,
"correlation": {},
"execution": {
"process_id": 6212,
"thread_id": 10044
},
"channel": "Microsoft-Windows-Privacy-Auditing/Operational",
"computer": "WinDev2310Eval",
"security": {
"user_id": "S-1-5-21-1992711665-1655669231-58201500-1000"
}
},
"event_data": {
"CallerUserSid": "S-1-5-21-1992711665-1655669231-58201500-1000",
"CallerProcessName": "Widgets.exe",
"CallerPackageFamilyName": "MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy",
"OldConsentValue": 0,
"NewConsentValue": 8,
"IsSetByHigherAuthority": false,
"EffectiveConsentValue": 8,
"TargetUserSid": "S-1-5-21-1992711665-1655669231-58201500-1000",
"TargetPackageFamilyName": "MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy",
"HRESULT": 0
},
"message": ""
}
References #
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 750: FAM: NotifyTaskInstanceCompleted, TaskID:FAM_NotifyTaskInstanceCompleted_TaskID, hr:hr.
#Event ID 751: FAM: NotifyTaskInstanceRunning, TaskID:FAM_NotifyTaskInstanceRunning_TaskID Timer - p1_UInt32.
#Event ID 752: FAM: RegisterForegroundAgentManagerProxy:PID=p1_UInt32, ConsumerTaskId=p2_UInt32, Option=p3_UInt32, hr=p4_UInt32.
#Event ID 753: FAM: UiForeground:Memory:FAM_UiForegroundMemoryMB, CPU:MB_CPU%.
#Event ID 754: FAM: CreateAgentLaunchRequest, TaskID:FAM_CreateAgentLaunchRequest_TaskID, Queue:Queue, hr:hr.
#Event ID 755: FAM: CancelAgentRequest, TaskID:FAM_CancelAgentRequest_TaskID, CancelType=p1_UInt32, hr:p2_UInt32.
#Event ID 756: FAM: AbortAgentRequestsInternal, hr:FAM_AbortAgentRequestsInternal_hr.
#Event ID 757: FAM: CompleteAgent, TaskID:FAM_CompleteAgent_TaskID, hr:hr.
#Event ID 758: FAM: PrioritizeAgentRequest, TaskID:FAM_PrioritizeAgentRequest_TaskID, hr:hr.
#Event ID 759: FAM: OnForegroundAppChanged()-Abort agents
#Description
FAM: OnForegroundAppChanged()-Abort agents.
Message #
Event ID 761: FAM: NotifyConsumer, Notification:FAM_NotifyConsumer_Notification, TaskID:TaskID, hrResult:hrResult.
#Event ID 762: FAM: AcquireSharedResourceSet, ProductID:FAM_AcquireSharedResourceSet_ProductID, ConsumerPid:ConsumerPid, Pending:Pending, hr:hr.
#Event ID 763: FAM: ReleaseResourceSet, #p1_UInt32, hr:p2_UInt32.
#Event ID 764: FAM: TimerExpired:TerminateHost[PID=p1_UInt32].
#Event ID 765: FAM: AcquireResourceSet, #MB_CPU, Mem:hrMB, CPU:p1_UInt32%, hr:p2_UInt32.
#Event ID 766: FAM: AbortTask: TaskInstanceID = p1_UInt32, HR = p2_UInt32.
#Event ID 801: OTM: Read settings.
#Event ID 802: OTM: Task instance p2_UInt32 of product p1_GUID completed.
#Event ID 803: OTM: TaskHost of product p1_GUID has crashed.
#Event ID 804: OTM: TaskHost of product p1_GUID has been completed by PacMan.
#Event ID 806: OTM: Launching boot agents for product p1_GUID failed with error p2_UInt32.
#Event ID 807: OTM: Launch boot agents for product p1_GUID.
#Event ID 808: OTM: Running OnUpdateStarted for product p1_GUID.
#Event ID 809: OTM: Restarting boot agents for product p1_GUID after update.
#Event ID 811: OTM: Could not launch OEM boot agents.
#Event ID 812: OTM: Could not process update notification for OEM application.
#Event ID 813: OTM: Could not process update notification for OEM application.
#Event ID 814: OTM: OemTaskManager::NotifyTaskInstanceCompleted failed with error p1_UInt32.
#Event ID 815: OTM: OemTaskManager::NotifyTaskHostCompleted failed with error p1_UInt32.
#Event ID 816: OTM: OemApp::DumpAgents failed with error p1_UInt32.
#Event ID 817: OTM: An error occurred.
#Event ID 818: OTM: No apps with ServiceAgents were found.
#Description
OTM: No apps with ServiceAgents were found.
Message #
Event ID 819: OTM: No ServiceAgent task found for product p1_GUID.
#Event ID 820: OTM: AbortTask: TaskInstanceID = p1_UInt32, HR = p2_UInt32.
#Event ID 861: PLM: Start tracking new app user p1_UInt64 app p2_String, contract p3_String, hr = p4_UInt32.
#Event ID 862: PLM: Application launched p1_UInt32 in app p2_String, hr = p3_UInt32.
#Event ID 863: PLM: Application resume p1_UInt32 in app p2_String, hr = p3_UInt32.
#Event ID 864: PLM: Suspend-Terminate(p3_Boolean) task p1_UInt32 in app p2_String.
#Event ID 865: PLM: Suspend-Terminate suspend of task p1_UInt32 in app p2_String exemption p3_UInt32.
#Event ID 866: PLM: Suspend-Terminate auto terminate(p3_Boolean) task p1_UInt32 in app p2_String.
#Event ID 867: PLM: Suspend-Terminate task p1_UInt32 in app p2_String, hr p3_UInt32.
#Event ID 868: PLM: Halt app p1_String, hr p2_UInt32.
#Event ID 869: PLM: Task resume p1_UInt32 in app p2_String.
#Event ID 870: PLM: Task cancel p1_UInt32 in app p2_String.
#Event ID 871: PLM: Task remove p1_UInt32 in app p2_String.
#Event ID 872: PLM: Queue Application State Change Notification for user user app ApplicationId state AppState.
#Event ID 873: PLM: Queue Activation State Change Notification ActivationId state ActState.
#Event ID 874: PLM: Before Activate task p1_UInt32 for user p2_UInt64 in app p3_String, contract p4_String, hostid p5_UInt64, hr = p6_UInt32.
#Event ID 875: PLM: After Activate task p1_UInt32 with result p2_UInt32, hr = p3_UInt32.
#Event ID 876: PLM: ApplicationLayer=p1_AppLayer Set Foreground new task p2_UInt32, prev task p3_UInt32.
#Event ID 877: PLM: Add task p1_UInt32 to user p2_UInt64 and app p3_String, hr = p4_UInt32.
#Event ID 878: PLM: Create app for user p1_UInt64, p2_String, new [app(p3_Boolean) pkg(p4_Boolean)], hr = p5_UInt32.
#Event ID 879: PLM: Add task p1_UInt32 to user p2_UInt64 and app p3_String, new [app(p4_Boolean) pkg(p5_Boolean)], hr = p6_UInt32.
#Event ID 880: PLM: Remove task p1_UInt32, was found(p2_Boolean).
#Event ID 881: PLM: Remove app if empty from user p1_UInt64, p2_String, hr = p3_UInt32.
#Event ID 882: PLM: Remove pkg if empty from user p1_UInt64, p2_String, hr = p3_UInt32.
#Event ID 883: PLM: Send Application State Change Notification for user user app ApplicationId state AppState.
#Event ID 884: PLM: Send Activation State Change Notification ActivationId state ActState.
#Event ID 886: PLM: Timer Started duration p1_UInt32ms, hr p2_UInt32.
#Event ID 887: PLM: Timer Expired duration p1_UInt32ms, hr p2_UInt32.
#Event ID 888: PLM: Abort task p1_UInt32 reason p2_String, dump(p3_Boolean).
#Event ID 889: PLM: Task rehydrate p1_UInt32 in app p2_String contract p3_String.
#Event ID 890: PLM: Start RPC suspension timer PSMKey=p1_String WakeCounters=p2_UInt32, hr = p3_UInt32.
#Event ID 891: PLM: Cancel RPC suspension timer PSMKey=ApplicationId app state=AppState.
#Event ID 892: PLM: Terminate application PSMKey=p1_String due to expired RPC suspension timeout.
#Event ID 893: PLM: Application p1_String cannot be terminated due to p2_String exemption.
#Event ID 894: PLM: Application p1_String can be terminated.
#Event ID 895: PLM: EvaluateAndTerminateApplication p1_String cannot be terminated due to p2_String.
#Event ID 896: PLM: EvaluateAndTerminateApplication p1_String, terminate hr = p2_UInt32.
#Event ID 897: PLM: Terminate debounce app p1_String current state p2_UInt32 ultimate state p3_UInt32.
#Event ID 898: PLM: Terminate debounce app p1_String, hr = p2_UInt32.
#Event ID 899: PLM: Terminate reason was cleared
#Description
PLM: Terminate reason was cleared.
Message #
Event ID 900: PLM: Abort app user p1_UInt64 app p2_String reason p3_String, dump(p4_Boolean).
#Event ID 901: PLM: Watson dump NOT generated for user p1_UInt64 app p2_String, process count p3_UInt32.
#Event ID 902: PLM: Watson dump start for user p1_UInt64 app p2_String reason p3_String description p4_String, process p5_UInt32 (p6_UInt32).
#Event ID 903: PLM: Watson dump information for user p1_UInt64 app p2_String product Id p3_String title p4_String version p5_String.
#Event ID 904: PLM: Watson dump end for user p1_UInt64 app p2_String, hr p3_UInt32.
#Event ID 905: PLM: Add Watson dump to user p1_UInt64 app p2_String process p3_UInt32, hr p4_UInt32.
#Event ID 906: PLM: Failed to add Watson process info for process p1_UInt32 user p2_UInt64 app p3_String.
#Event ID 907: PLM: Watson dump status changed pids(p1_UInt32).
#Event ID 908: PLM: Watson dump status changed, add process p1_UInt32 user p2_UInt64 app p3_String.
#Event ID 909: PLM: Watson dump status changed, remove process p1_UInt32 user p2_UInt64 app p3_String.
#Event ID 910: PLM: Watson dump status changed, unknown process p1_UInt32 app p2_String.
#Event ID 911: PLM: Watson add/remove(p2_Boolean) error report task completion to process p1_UInt32 (signaled p4_Boolean), hr p3_UInt32.
#Event ID 912: PLM: Watson in progress for PSMKey p1_String, waiting.
#Event ID 913: PLM: Watson in progress finished for PSMKey p1_String.
#Event ID 914: PLM: Extending RPC suspension timer PSMKey=p1_String.
#Event ID 915: PLM: Acquire network reference failed CM_RESULT=p1_UInt32.
#Event ID 916: PLM: Release network reference failed CM_RESULT=p1_UInt32.
#Event ID 917: PLM: Suspend-Terminate(p2_Boolean) app p1_String exemption p3_UInt32, hr p4_UInt32.
#Event ID 918: PLM: Suspend-Terminate task p1_UInt32 while dehydrating.
#Event ID 919: PLM: Add user p1_UInt64 sid p2_String to data store, hr = p3_UInt32.
#Event ID 920: PLM: Start launch grace for user p1_UInt64 app p2_String, hr = p3_UInt32.
#Event ID 921: PLM: Set Window Id for user p1_UInt64 app p2_String wnd p3_UInt32.
#Event ID 922: PLM: EvaluateLaunchGraceCompleted for user p1_UInt64 app p2_String.
#Event ID 923: PLM: Terminating reexisting app due to sihost restart with PSMKey p1_String, status p2_UInt32.
#Event ID 924: PLM: Terminating preexisting applications on sihost startup
#Description
PLM: Terminating preexisting applications on sihost startup.
Message #
Event ID 925: PLM: Set Pause On Lock for user p1_UInt64 app p2_String value p3_Boolean.
#Event ID 1051: AAM: Initiate activation for user p1_UInt64 app p2_String contract p3_String task p4_UInt32, hr p5_UInt32.
#Event ID 1052: AAM: Initiate activation completed for task p2_UInt32 (expected p1_UInt32), hr p3_UInt32.
#Event ID 1053: AAM: Initialize activation for user p1_UInt64 app p2_String contract p3_String lightup(p5_Boolean), hr p4_UInt32.
#Event ID 1054: AAM: Validate activation, hr p1_UInt32.
#Event ID 1055: AAM: Verify license for pkg p1_String, hr p2_UInt32.
#Event ID 1056: AAM: Activate activation task p1_UInt32 host p2_UInt32, hr p3_UInt32.
#Event ID 1057: AAM: Activation shim timer expired p1_UInt32, hr p2_UInt32.
#Event ID 1058: AAM: Initiate Core UI, hr p1_UInt32.
#Event ID 1060: AAM: Create Windows AAM, hr p1_UInt32.
#Event ID 1061: AAM: Attempted remediation, hr p1_UInt32.
#Event ID 1062: AAM: Failed while trying to find a remediation handler, hr p1_UInt32.
#Event ID 1063: AAM: Failed while trying to find the package status, hr p1_UInt32.
#Event ID 1064: AAM: Failed while trying to find the package origin, hr p1_UInt32.
#Event ID 1065: AAM: Failed while trying to verify and initialize the activation, hr p1_UInt32.
#Event ID 1066: AAM: Failed while trying to check roaming data, hr p1_UInt32.
#Event ID 1071: AAM: Broker created plugins p1_UInt32, expected p2_UInt32.
#Event ID 1072: AAM: Broker initialize, hr p1_UInt32.
#Event ID 1073: AAM: Broker start activate application p1_String (p3_UInt32 args) arg[0] p2_String type p4_activationType caller PID p5_UInt32 (initialization count p6_UInt32).
#Description
AAM: Broker start activate application p1_String (p3_UInt32 args) arg[0] p2_String type p4_activationType caller PID p5_UInt32 (initialization count p6_UInt32).
Message #
Fields #
| Name | Description |
|---|---|
p1_String UnicodeString | |
p2_String UnicodeString | |
p3_UInt32 UInt32 | |
p4_activationType GUID | |
p5_UInt32 UInt32 | |
p6_UInt32 UInt32 |
Event ID 1074: AAM: Broker end activate application p1_String launched PID p2_UInt32 task p3_UInt32, hr p4_UInt32.
#Event ID 1075: AAM: Broker activate task with result for app p1_String caller PID p2_UInt32 caller task p3_UInt32.
#Event ID 1076: AAM: Broker get result for PID p1_UInt32 task p2_UInt32 result p3_UInt32, hr p4_UInt32.
#Event ID 1077: AAM: Broker get task id for process p1_UInt32 window p2_UInt32 = task p3_UInt32, hr p4_UInt32.
#Event ID 1078: AAM: Broker init session manager, hr p1_UInt32.
#Event ID 1079: AAM: Broker release session manager
#Description
AAM: Broker release session manager.
Message #
Event ID 1080: AAM: Broker add task with result for parent p1_UInt32, hr p2_UInt32.
#Event ID 1081: AAM: Broker get task with result for parent p1_UInt32, hr p2_UInt32.
#Event ID 1082: AAM: Broker remove task with result for parent p1_UInt32, hr p2_UInt32.
#Event ID 1083: AAM: Broker create completed event for caller PID p1_UInt32, hr p2_UInt32.
#Event ID 1084: AAM: Broker get task with result for child p1_UInt32, hr p2_UInt32.
#Event ID 1085: AAM: Broker parent task completed TaskId with child state State.
#Event ID 1086: AAM: Broker child task completed TaskId with state State, hr HRESULT.
#Event ID 1087: AAM: Broker task event signaled for parent TaskId child TaskId_2 previous state State, hr HRESULT.
#Event ID 1088: AAM: Broker close task p1_UInt32, hr p2_UInt32.
#Event ID 1089: AAM: Broker activate application p1_String arg[p3_UInt32] p2_String.
#Event ID 1100: FM-ARP: ApplyResourceSetType ResourceSetType=p1_UInt32 User=p2_UInt64 PSMKey=p3_String ResourceSet=pResSet HRESULT=p4_UInt32.
#Event ID 1101: FM-ARP: ApplyTerminal UserContext=UserContext PsmKey=PsmKey ResourceSet=pResSet HRESULT=HRESULT.
#Event ID 1102: FM-ARP: RemoveInterruptiveUIAccess UserContext=UserContext PsmKey=PsmKey ResourceSet=pResSet HRESULT=HRESULT.
#Event ID 1103: FM-ARP: ResetInterruptiveUIAccess UserContext=UserContext PsmKey=PsmKey ResourceSet=pResSet HRESULT=HRESULT.
#Event ID 1104: FM-ARP: OnRelease UserContext=p1_UInt64 PsmKey=p2_String ReleaseAction=p3_UInt32 ReleasedCachedResource=p4_Boolean ReleaseAppliedResource=p5_Boolean HRESULT=p6_UInt32.
#Description
FM-ARP: OnRelease UserContext=p1_UInt64 PsmKey=p2_String ReleaseAction=p3_UInt32 ReleasedCachedResource=p4_Boolean ReleaseAppliedResource=p5_Boolean HRESULT=p6_UInt32.
Message #
Fields #
| Name | Description |
|---|---|
p1_UInt64 UInt64 | |
p2_String UnicodeString | |
p3_UInt32 UInt32 | |
p4_Boolean Boolean | |
p5_Boolean Boolean | |
p6_UInt32 UInt32 |
Event ID 1105: FM-ARP: OnAcquired UserContext=UserContext PsmKey=PsmKey ResourceSet=pResSet HRESULT=HRESULT.
#Event ID 1106: FM-ARP: OnOutOfMemory UserContext=UserContext PsmKey=PsmKey ResourceSet=pResSet HRESULT=HRESULT.
#Event ID 1107: FM-ARP: ApplyResourceBoost User=p1_UInt64 PsmKey=p2_String HRESULT=p3_UInt32.
#Event ID 1108: FM-ARP: AcquireResourceSet ResourceSetType=p1_UInt32 Usercontext=p2_UInt64 PsmKey=p3_String HRESULT=p3_UInt32.
#Event ID 1109: FM-ARP: Apply Cached Resource Set Usercontext=p1_UInt64 PsmKey=p2_String HRESULT=p3_UInt32.
#Event ID 1110: FM-ARP: Clear Cached Resource User=p1_UInt64 PSMKey=p2_String.
#Event ID 1111: FM-ARP: Fire Cached ResourceCallback User=p1_UInt64 PSMKey=p2_String.
#Event ID 1112: FM: +Resume_ActivationPhase ActivationInstanceId=.
#Event ID 1113: FM: -Resume_ActivationPhase ActivationInstanceId=.
#Event ID 1114: FM: +PauseActivation ActivationInstanceId=.
#Event ID 1115: FM: -PauseActivation HRESULT=.
#Event ID 1116: FM: +CancelActivation ActivationInstanceId=.
#Event ID 1117: FM: -CancelActivation ActivationInstanceId=.
#Event ID 1118: FM: +AbortActivation ActivationInstanceId=.
#Event ID 1119: FM: -AbortActivation ActivationInstanceId=.
#Event ID 1120: FM: +GetActivationProcessId ActivationInstanceId=.
#Event ID 1121: FM: -GetActivationProcessId ActivationInstanceId=.
#Event ID 1122: FM: +SetForegroundActivationInstance ActivationInstanceId=.
#Event ID 1123: FM: -SetForegroundActivationInstance ActivationInstanceId=.
#Event ID 1124: FM: +SetForeground_ActivationPhase ActivationInstanceId=.
#Event ID 1125: FM: -SetForeground_ActivationPhase ActivationInstanceId=.
#Event ID 1126: FM: SetActivationDehydrationEligibility TaskID=.
#Event ID 1127: FM: OnActivationStateChanged ActivationInstanceId=.
#Event ID 1128: FM: OnApplicationStateChanged AUMID=.
#Event ID 1129: FM: IsValidActivationProcessId ActivationInstanceID=.
#Event ID 1130: FM: GetForegroundProductId fIgnoreLockScreen=.
#Event ID 1131: FM: GetProductIdFromProcessID ProductID=.
#Event ID 1132: FM: Discarding Application Frozen notification because the application isn't really frozen
#Description
FM: Discarding Application Frozen notification because the application isn't really frozen.
Message #
Event ID 1133: FM: Dehydrate Application AUMID=.
#Event ID 1134: FM: +ResumePrerequisitePhase ActivationInstanceId=.
#Event ID 1135: FM: -ResumePrerequisitePhase HRESULT=.
#Event ID 1136: FM: AcquireForegroundResourceSet ActivationInstanceId=.
#Event ID 1137: FM: OnRelease ForegroundResourceSet ActivationInstanceId=.
#Event ID 1138: FM: GenerateWatsonReport PID=.
#Event ID 1139: FM: TaskCompletion New Battery Saver State {p1_UInt32}.
#Event ID 1140: FM: TaskCompletion Revoke Exemption PID=.
#Event ID 1141: FM: TaskCompletion Apply({p3_Boolean}) Exemption PID={p1_UInt32} TC={p2_UInt32} HRESULT={p4_UInt32}.
#Event ID 1142: FM: SetContinuation ActivationInstanceID=.
#Event ID 1143: FM: AbandonContinuation ActivationInstanceID=.
#Event ID 1144: FM: PerformContinuation ActivationInstanceID=.
#Event ID 1145: FM: Shutdown HRESULT=.
#Event ID 1146: FM: +PauseActivation ActivationInstanceId=.
#Event ID 1147: FM: +ActivationBypass ActivationInstanceId=.
#Event ID 1148: FM: -ActivationBypass ActivationInstanceId=.
#Event ID 1149: FM: +PostPausePendingResume ActivationInstanceId=.
#Event ID 1150: FM: -PostPausePendingResume ActivationInstanceId=.
#Event ID 1151: FM-ARP: ApplyResourceSet ResourceSet=.
#Event ID 1152: FM-ARP: ApplyResourceSetType ResourceSetType=.
#Event ID 1153: FM-ARP: ApplyTerminal ResourceSet=.
#Event ID 1154: FM-ARP: RemoveInterruptiveUIAccess ResourceSet=.
#Event ID 1155: FM-ARP: ResetInterruptiveUIAccess ResourceSet=.
#Event ID 1156: FM-ARP: OnRelease CallbackId=.
#Event ID 1157: FM-ARP: OnOutOfMemory CallbackId=.
#Event ID 1158: FM-EEP: CheckProcessBackgroundEligibility ProcessId=.
#Event ID 1159: FM-EEP: ApplyTaskCompletion ProcessId=.
#Event ID 1160: FM-EEP: RevokeTaskCompletion ProcessId=.
#Event ID 1161: FM-EEP: RequestExtendedExecution ProcessId=.
#Event ID 1162: FM-EEP: RegisterForExtensionRevokedEvent ProcessId=.
#Event ID 1163: FM-EEP: CompleteExtendedExecution ProcessId=.
#Event ID 1164: FM-EEP: RevokeSuspensionExtension User=.
#Event ID 1165: FM-ARP: NotifyPendingResourceSetTransition ResourceSetType=.
#Event ID 1166: FM-EEP: ApplyTaskCompletionResourceSet AppUserModelId=.
#Event ID 1167: FM-EEP: IsApplicationStateBackgroundEligibile User=.
#Event ID 1168: FM-EEP: RevokeTaskCompletionExemption AppUserModelId=.
#Event ID 1169: FM-EEP: AllowBackgroundExecution User=.
#Event ID 1170: FM-EEP: OnPackageEnergyStateChange PackageFullName=.
#Event ID 1171: FM: SetActivationImportanceVector TaskID=.
#Event ID 1172: FM: NotifyWindowAdded TaskID=.
#Event ID 1173: FM: NotifyWindowRemoved TaskID=.
#Event ID 1174: FTM: Logoff User=.
#Event ID 1175: FM-EEP: UnregisterForExtensionRevokedEvent ProcessId=.
#Event ID 1176: FM-EEP: RegisterExtendedExecutionClient ProcessId=.
#Event ID 1177: FM-EEP: UnregisterExtendedExecutionClient ProcessId=.
#Event ID 1178: FM: ActivationTimeoutPolicyChanged TaskID=.
#Event ID 1179: FM-EEP: OnConnectedStandbyStateChanged State=.
#Event ID 1180: FM-ARP: ApplyResourceBoost User=.
#Event ID 1181: FM: OnAcquired ForegroundResourceSet ActivationInstanceId=.
#Event ID 1182: FM-CAM: OnApplicationStateChangedEx UserContext=.
#Event ID 1183: FM-CAM: AcquireForegroundResource UserContext=.
#Event ID 1184: FM-CAM: OnAcquired CallbackId=.
#Event ID 1185: FM-CAM: OnRelease CallbackId=.
#Event ID 1186: FM-CAM: OnTimerExpired CallbackId=.
#Event ID 1187: FM: SendActivationNotification ActivationId=.
#Event ID 1200: FM-CAM: OnApplicationStateChangedEx UserContext=UserContext PsmKey=ApplicationId state=AppState HRESULT=HRESULT.
#Event ID 1201: FM-CAM: AcquireForegroundResource UserContext=p1_UInt64 PsmKey=p2_String isPending=p3_Boolean.
#Event ID 1202: FM-CAM: OnResourceAcquired UserContext=p1_UInt64 PsmKey=p2_String.
#Event ID 1203: FM-CAM: OnResourceTimerExpired UserContext=p1_UInt64 PsmKey=p2_String.
#Event ID 1250: FM: TaskCompletion New Battery Saver State p1_UInt32.
#Event ID 1251: FM: TaskCompletion Revoke Exemption PID=p1_UInt32 AUMID=p2_String TC=p3_UInt32.
#Event ID 1252: FM: TaskCompletion Apply(p3_Boolean) Exemption PID=p1_UInt32 TC=p2_UInt32 HRESULT=p4_UInt32.
#Event ID 1253: FM-EEP: CheckProcessBackgroundEligibility ProcessId=p1_UInt32 TaskCompletionCategory=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 1254: FM-EEP: ApplyTaskCompletion ProcessId=p1_UInt32 TaskCompletionCategory=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 1255: FM-EEP: RevokeTaskCompletion ProcessId=p1_UInt32 TaskCompletionCategory=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 1256: FM-EEP: RequestExtendedExecution ProcessId=p1_UInt32 Reason=p2_UInt32 DeniedReason=p3_UInt32 HRESULT=p4_UInt32.
#Event ID 1257: FM-EEP: RegisterForExtensionRevokedEvent ProcessId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 1258: FM-EEP: CompleteExtendedExecution ProcessId=p1_UInt32 fIsResumed=p2_Boolean HRESULT=p3_UInt32.
#Event ID 1259: FM-EEP: RevokeSuspensionExtension User=p1_UInt64 PsmKey=p2_String HRESULT=p3_UInt32.
#Event ID 1260: FM-ARP: NotifyPendingResourceSetTransition ResourceSetType=p1_UInt32 ResourceSet=pResSet HRESULT=p3_UInt32.
#Event ID 1261: FM-EEP: ApplyTaskCompletionResourceSet AppUserModelId=p0 fTimerExpiredCallback=p1 HRESULT=p2.
#Event ID 1262: FM-EEP: IsApplicationStateBackgroundEligibile User=p1_UInt64 PsmKey=p2_String fResult=p3_Boolean.
#Event ID 1263: FM-EEP: RevokeTaskCompletionExemption AppUserModelId=p1_String HRESULT=p2_UInt32.
#Event ID 1264: FM-EEP: AllowBackgroundExecution User=p1_UInt64 AppUserModelId=p2_String DeniedReason=p3_UInt32 HRESULT=p4_UInt32.
#Event ID 1265: FM-EEP: OnPackageEnergyStateChange PackageFullName=p1_String PackageState=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 1266: FM-EEP: RegisterExtendedExecutionClient ProcessId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 1267: FM-EEP: UnregisterExtendedExecutionClient ProcessId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 1268: FM-EEP: UnregisterForExtensionRevokedEvent ProcessId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 1269: FM-EEP: ApplyTaskCompletionResourceSet AppUserModelId=p0 TC=p1 isResourcePending =p2 HRESULT=p3.
#Event ID 1270: FM-EEP: Task Completion Denied By EDP Policy ProcessId=p1_UInt32 TC=p2_UInt32.
#Event ID 1271: FM-EEP: IsForegroundApplication Application=p0 Result=p1.
#Event ID 1400: FM: Registering callback p1_String HRESULT=p2_UInt32.
#Event ID 1401: FM: Generate ActivationInstanceID Id=p1_UInt32.
#Event ID 1402: FM: +ActivationPrerequisitePhase ActivationInstanceId=p1_UInt32 UserContext=p2_UInt64 AUMID=p3_String ContractId=p4_String.
#Event ID 1403: FM: -ActivationPrerequisitePhase HRESULT=p1_UInt32 fPending=p2_Boolean.
#Event ID 1404: FM: +Resume_RehydrationPhase ActivationInstanceId=p1_UInt32.
#Event ID 1405: FM: -Resume_RehydrationPhase ActivationInstanceId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 1406: FM: +ResumeActivation ActivationInstanceId=p1_UInt32 fIsResumed=p2_Boolean.
#Event ID 1407: FM: -ResumeActivation ActivationInstanceId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 1408: FM: +Resume_ActivationPhase ActivationInstanceId=p1_UInt32.
#Event ID 1409: FM: -Resume_ActivationPhase ActivationInstanceId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 1410: FM: +PauseActivation ActivationInstanceId=p1_UInt32.
#Event ID 1411: FM: -PauseActivation HRESULT=p1_UInt32 PausePending=p2_Boolean.
#Event ID 1412: FM: +CancelActivation ActivationInstanceId=p1_UInt32.
#Event ID 1413: FM: -CancelActivation ActivationInstanceId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 1414: FM: +AbortActivation ActivationInstanceId=p1_UInt32 Reason=p2_String fGenerateWER=p3_Boolean.
#Event ID 1415: FM: -AbortActivation ActivationInstanceId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 1416: FM: +GetActivationProcessId ActivationInstanceId=p1_UInt32.
#Event ID 1417: FM: -GetActivationProcessId ActivationInstanceId=p1_UInt32 PIDp2_UInt32 HRESULT=p3_UInt32.
#Event ID 1418: FM: +SetForegroundActivationInstance ActivationInstanceId=p1_UInt32 Isforeground=p2_Boolean.
#Event ID 1419: FM: -SetForegroundActivationInstance ActivationInstanceId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 1420: FM: SetActivationDehydrationEligibility TaskID=p1_UInt32 State=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 1421: FM: OnActivationStateChanged ActivationInstanceId=ActivationId state=ActState HRESULT=HRESULT.
#Event ID 1422: FM: OnApplicationStateChanged UserContext=UserContext PSMKey=ApplicationId state=AppState HRESULT=HRESULT.
#Event ID 1423: FM: IsValidActivationProcessId ActivationInstanceID=p1_UInt32 PID=p2_UInt32 fValid=p3_Boolean HRESULT=p4_UInt32.
#Event ID 1424: FM: GetForegroundProductId fIgnoreLockScreen=p1_Boolean ProductID=p2_GUID HRESULT=p3_UInt32.
#Event ID 1425: FM: GetProductIdFromProcessID ProductID=p1_GUID PID=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 1426: FM: Discarding Application Frozen notification because the application isn't really frozen
#Description
FM: Discarding Application Frozen notification because the application isn't really frozen.
Message #
Event ID 1427: FM: Dehydrate Application AUMID=p1_UInt64 HRESULT=p2_String.
#Event ID 1428: FM: +ResumePrerequisitePhase ActivationInstanceId=p1_UInt32.
#Event ID 1429: FM: -ResumePrerequisitePhase HRESULT=p1_UInt32 fPending=p2_Boolean.
#Event ID 1430: FM: GenerateWatsonReport PID=p1_UInt32 Reason=p2_String HRESULT=p3_UInt32.
#Event ID 1431: FM: SetContinuation ActivationInstanceID=p1_UInt32.
#Event ID 1432: FM: AbandonContinuation ActivationInstanceID=p1_UInt32.
#Event ID 1433: FM: PerformContinuation ActivationInstanceID=p1_UInt32.
#Event ID 1434: FM: Shutdown HRESULT=p1_UInt32.
#Event ID 1435: FM: +PauseActivation ActivationInstanceId=p1_UInt32 AUMID=p2_String PackageFullName=p3_String.
#Event ID 1436: FM: +ActivationBypass ActivationInstanceId=p1_UInt32.
#Event ID 1437: FM: -ActivationBypass ActivationInstanceId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 1438: FM: +PostPausePendingResume ActivationInstanceId=p1_UInt32.
#Event ID 1439: FM: -PostPausePendingResume ActivationInstanceId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 1440: FM: SetActivationImportanceVector TaskID=p1_UInt32 Vector=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 1441: FM: NotifyWindowAdded TaskID=p1_UInt32 WindowInstanceId=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 1442: FM: NotifyWindowRemoved TaskID=p1_UInt32 WindowInstanceId=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 1443: FTM: Logoff User=p1_UInt64 HRESULT=p2_UInt32.
#Event ID 1444: FM: ActivationTimeoutPolicyChanged TaskID=p1_UInt32 WindowInstanceId=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 1445: FM-EEP: OnConnectedStandbyStateChanged State=p1_UInt32.
#Event ID 1446: FM: SendActivationNotification ActivationId=p1_UInt32 NotificationId=p2_UInt32.
#Event ID 1447: FM: OnResourceAcquired Usercontext=p1_UInt64 PsmKey=p2_String HRESULT=p3_UInt32.
#Event ID 1448: FM: OnResourceTimerExpired Usercontext=p1_UInt64 PsmKey=p2_String HRESULT=p3_UInt32.
#Event ID 1449: FM: PostPausePendingActivation ActivationId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 2000: VoIPPolicy: Evaluate Activation Action for PsmKey = PsmKey, WorkItemId = WorkItemId, Action = ActivationAction, HRESULT = HRESULT.
#Event ID 2001: VoIPPolicy: Task Activated for PsmKey = p1, WorkItemId = p0, HRESULT = p2.
#Event ID 2002: VoIPPolicy: Task Completed for PsmKey = p1, WorkItemId = p0, HRESULT = p2.
#Event ID 2003: VoIPPolicy: Task Canceled for PsmKey = p1, WorkItemId = p0, HRESULT = p2.
#Event ID 2004: VoIPPolicy: Task Aborted for PsmKey = p1, WorkItemId = p0, HRESULT = p2.
#Event ID 2005: VoIPPolicy: Determine and Apply Resources PsmKey = p1, WorkItemId = p0, HRESULT = p2.
#Event ID 2006: VOIP: NotifyVoipActiveCall called for PID:PID PSMKey:{PsmKey} HRESULT:HRESULT.
#Event ID 2007: VOIP: LaunchVoipRtcTask called for PID:PID PSMKey:{PsmKey} with TaskEntryPoint:{TaskEntryPoint} and WNFStateName:{WnfStateName} HRESULT:HRESULT.
#Event ID 2008: VOIP: NotifyVoipActivityCompleted called for PID:PID PSMKey:{PsmKey} HRESULT:HRESULT.
#Event ID 2009: VOIP: HoldActiveCall called for PID:PID PSMKey:{PsmKey} HRESULT:HRESULT.
#Event ID 2010: VOIP: UnholdActiveCall called for PID:PID PSMKey:{PsmKey} HRESULT:HRESULT.
#Event ID 2011: VOIP: NotifyIncomingCallDialogDisplayed called for PID:PID PSMKey:{PsmKey} HRESULT:HRESULT.
#Event ID 2012: VOIP: NotifyIncomingCallDialogDismissed called for PID:PID PSMKey:{PsmKey} HRESULT:HRESULT.
#Event ID 2013: VOIP: CallActive called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApplied InFor...
#Description
VOIP: CallActive called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApplied InForeground:InForeground}.
Message #
Fields #
| Name | Description |
|---|---|
WorkItemId GUID | |
PsmKey UnicodeString | |
HRESULT UInt32 | |
InActiveCall Boolean | |
HasRTCTask Boolean | |
OnHold Boolean | |
TaskCompletionApplied Boolean | |
InForeground Boolean |
Event ID 2014: VOIP: AppLaunchVoipRtcTask called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApp...
#Description
VOIP: AppLaunchVoipRtcTask called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApplied InForeground:InForeground}.
Message #
Fields #
| Name | Description |
|---|---|
WorkItemId GUID | |
PsmKey UnicodeString | |
HRESULT UInt32 | |
InActiveCall Boolean | |
HasRTCTask Boolean | |
OnHold Boolean | |
TaskCompletionApplied Boolean | |
InForeground Boolean |
Event ID 2015: VOIP: OnVoipActivityCompleted called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletion...
#Description
VOIP: OnVoipActivityCompleted called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApplied InForeground:InForeground}.
Message #
Fields #
| Name | Description |
|---|---|
WorkItemId GUID | |
PsmKey UnicodeString | |
HRESULT UInt32 | |
InActiveCall Boolean | |
HasRTCTask Boolean | |
OnHold Boolean | |
TaskCompletionApplied Boolean | |
InForeground Boolean |
Event ID 2016: VOIP: AppHoldActiveCall called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApplie...
#Description
VOIP: AppHoldActiveCall called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApplied InForeground:InForeground}.
Message #
Fields #
| Name | Description |
|---|---|
WorkItemId GUID | |
PsmKey UnicodeString | |
HRESULT UInt32 | |
InActiveCall Boolean | |
HasRTCTask Boolean | |
OnHold Boolean | |
TaskCompletionApplied Boolean | |
InForeground Boolean |
Event ID 2017: VOIP: AppUnholdActiveCall called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionAppl...
#Description
VOIP: AppUnholdActiveCall called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApplied InForeground:InForeground}.
Message #
Fields #
| Name | Description |
|---|---|
WorkItemId GUID | |
PsmKey UnicodeString | |
HRESULT UInt32 | |
InActiveCall Boolean | |
HasRTCTask Boolean | |
OnHold Boolean | |
TaskCompletionApplied Boolean | |
InForeground Boolean |
Event ID 2018: VOIP: OnIncomingCallDialogDisplayed called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionAppli...
#Description
VOIP: OnIncomingCallDialogDisplayed called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApplied InForeground:InForeground}.
Message #
Fields #
| Name | Description |
|---|---|
WorkItemId GUID | |
PsmKey UnicodeString | |
HRESULT UInt32 | |
InActiveCall Boolean | |
HasRTCTask Boolean | |
OnHold Boolean | |
TaskCompletionApplied Boolean | |
InForeground Boolean |
Event ID 2019: VOIP: OnIncomingCallDialogDismissed called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionAppli...
#Description
VOIP: OnIncomingCallDialogDismissed called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApplied InForeground:InForeground}.
Message #
Fields #
| Name | Description |
|---|---|
WorkItemId GUID | |
PsmKey UnicodeString | |
HRESULT UInt32 | |
InActiveCall Boolean | |
HasRTCTask Boolean | |
OnHold Boolean | |
TaskCompletionApplied Boolean | |
InForeground Boolean |
Event ID 2020: VOIP: AppDetermineAndApplyBestResourceSet called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT.
#Event ID 2021: VOIP: PolicyEvaluateAction called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} ActivationAction:ActivationAction HRESULT:HRESULT.
#Event ID 2022: VOIP: PolicyTaskActivated called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT.
#Event ID 2023: VOIP: PolicyTaskCompleted called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT.
#Event ID 2024: VOIP: PolicyTaskCanceled called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT.
#Event ID 2025: VOIP: PolicyTaskAborted called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT.
#Event ID 2026: VOIP: OnForegroundApplicationChanged called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionAppl...
#Description
VOIP: OnForegroundApplicationChanged called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApplied InForeground:InForeground}.
Message #
Fields #
| Name | Description |
|---|---|
WorkItemId GUID | |
PsmKey UnicodeString | |
HRESULT UInt32 | |
InActiveCall Boolean | |
HasRTCTask Boolean | |
OnHold Boolean | |
TaskCompletionApplied Boolean | |
InForeground Boolean |
Event ID 2027: VOIP: AppOnTaskActivated called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionAppli...
#Description
VOIP: AppOnTaskActivated called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApplied InForeground:InForeground}.
Message #
Fields #
| Name | Description |
|---|---|
WorkItemId GUID | |
PsmKey UnicodeString | |
HRESULT UInt32 | |
InActiveCall Boolean | |
HasRTCTask Boolean | |
OnHold Boolean | |
TaskCompletionApplied Boolean | |
InForeground Boolean |
Event ID 2028: VOIP: AppOnTaskCompleted called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionAppli...
#Description
VOIP: AppOnTaskCompleted called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApplied InForeground:InForeground}.
Message #
Fields #
| Name | Description |
|---|---|
WorkItemId GUID | |
PsmKey UnicodeString | |
HRESULT UInt32 | |
InActiveCall Boolean | |
HasRTCTask Boolean | |
OnHold Boolean | |
TaskCompletionApplied Boolean | |
InForeground Boolean |
Event ID 2029: VOIP: AppCancelVoipRtcTask called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApp...
#Description
VOIP: AppCancelVoipRtcTask called for WorkItemId:{WorkItemId} PSMKey:{PsmKey} HRESULT:HRESULT {InActiveCall:InActiveCall, HasRTCTask:HasRTCTask OnHold:OnHold TaskCompletionApplied:TaskCompletionApplied InForeground:InForeground}.
Message #
Fields #
| Name | Description |
|---|---|
WorkItemId GUID | |
PsmKey UnicodeString | |
HRESULT UInt32 | |
InActiveCall Boolean | |
HasRTCTask Boolean | |
OnHold Boolean | |
TaskCompletionApplied Boolean | |
InForeground Boolean |
Event ID 2030: VOIP: CancelVoipRtcTask called for PID:PID PSMKey:{PsmKey} HRESULT:HRESULT.
#Event ID 3201: Task: p1_UInt32 has started.
#Event ID 3202: Task: p1_UInt32 has paused.
#Event ID 3203: Task: p1_UInt32 has resumed.
#Event ID 3204: Task: p1_UInt32 has completed.
#Event ID 3206: EM: -GetTaskInfo().
#Event ID 3207: EM: GetAppInfo:p1_String,p2_String:p3_UInt32.
#Event ID 3208: EM: ParseBackgroundAbilities - HRESULT=p1_UInt32.
#Event ID 3209: EM: +ExecManServerHost::CreateProcess
#Description
EM: +ExecManServerHost::CreateProcess.
Message #
Event ID 3210: EM: -ExecManServerHost::CreateProcess.
#Event ID 3211: Sqm::AppPlatSqmAppDataUsage: skuId/productId - TaskID = taskInstanceId, Type = taskType, NewState = newState, ReasonForStateChange = reasonForStateChange, Duration (ms) = duration, PeakMemory (kb) ...
#Description
Sqm::AppPlatSqmAppDataUsage: skuId/productId - TaskID = taskInstanceId, Type = taskType, NewState = newState, ReasonForStateChange = reasonForStateChange, Duration (ms) = duration, PeakMemory (kb) = peak.
Message #
Fields #
| Name | Description |
|---|---|
skuId GUID | |
productId GUID | |
taskInstanceId UInt32 | |
taskType UInt32 | |
newState UInt32 | |
reasonForStateChange UInt32 | |
duration UInt64 | |
peak UInt64 |
Event ID 3215: Emc::ExecuteCommand: StartTaskCallbackBegin: TaskID = p1_UInt32.
#Event ID 3216: Emc::ExecuteCommand: StartTaskCallbackEnd: TaskID = p1_UInt32, HR = p2_UInt32.
#Event ID 3217: Emc::ExecuteCommand: PauseTaskCallbackBegin: TaskID = p1_UInt32.
#Event ID 3218: Emc::ExecuteCommand: PauseTaskCallbackEnd: TaskID = p1_UInt32, HR = p2_UInt32.
#Event ID 3219: Emc::ExecuteCommand: ResumeTaskCallbackBegin: TaskID = p1_UInt32.
#Event ID 3220: Emc::ExecuteCommand: ResumeTaskCallbackEnd: TaskID = p1_UInt32, HR = p2_UInt32.
#Event ID 3221: Emc::ExecuteCommand: ControlTaskCallbackBegin: TaskID = p1_UInt32.
#Event ID 3222: Emc::ExecuteCommand: ControlTaskCallbackEnd: TaskID = p1_UInt32, HR = p2_UInt32.
#Event ID 3223: Emc::ExecuteCommand: CancelTaskCallbackBegin: TaskID = p1_UInt32.
#Event ID 3224: Emc::ExecuteCommand: CancelTaskCallbackEnd: TaskID = p1_UInt32, HR = p2_UInt32.
#Event ID 3225: Emc::ExecuteCommand: BackgroundExecutionTaskCallbackBegin: TaskID = p1_UInt32.
#Event ID 3226: Emc::ExecuteCommand: BackgroundExecutionTaskCallbackEnd: TaskID = p1_UInt32, HR = p2_UInt32.
#Event ID 3230: Emc::RegisterBackgroundExecutionRequest: TaskID = p1_UInt32, ExecutionType = p2_UInt32, HR = p3_UInt32.
#Event ID 3240: Emc::DeregisterBackgroundExecutionRequest: TaskID = p1_UInt32, ExecutionType = p2_UInt32, Reason = p3_UInt32, HR = p4_UInt32.
#Event ID 3241: Emc::EnsureXbfForCurrentLocale: EnsureXbfForCurrentLocaleBegin: ProductID = p1_GUID.
#Event ID 3242: Emc::EnsureXbfForCurrentLocale: EnsureXbfForCurrentLocaleEnd: ProductID = p1_GUID.
#Event ID 3243: EM: Skipping terminate process call for p1_UInt32.
#Event ID 3244: EM: Terminating process: PID = p1_UInt32, ExitCode = p2_UInt32.
#Event ID 3300: AimServer::OnAgentRequestInvoked: AgentRequestID p1_UInt32 was invoked.
#Event ID 3301: AimServer::ReadSettings: HR = p1_UInt32.
#Event ID 3302: AimServer: Detected server for scope p1_UInt32 terminated (PID = p2_UInt32).
#Event ID 3304: AimServer::HandleEvent: ProductID p1_GUID received PM LifecyleEvent p2_UInt32.
#Event ID 3305: BA::NotifyTaskInstanceCompleted: AgentRequestID = p1_UInt32.
#Event ID 3306: BA::RegisterServiceRequest: AlreadyReserved = p1_Boolean, SR = p2_GUID, HR = p3_UInt32.
#Event ID 3307: BA::UnRegisterServiceRequest: SR = p1_GUID, HR = p2_UInt32.
#Event ID 3308: BA::CancelAgentRequest: AgentRequestID = p1_UInt32, CancelType = p2_UInt32, PID = p3_UInt32, HR = p4_UInt32.
#Event ID 3309: BA::NotifyTaskInstanceCompleted: Terminating Orphaned Host PID = p1_UInt32.
#Event ID 3310: BA::OrphanAgentRequest: AgentRequestID = p1_UInt32, HR = p2_UInt32.
#Event ID 3311: BA::UnRegisterServiceRequest: Terminating host PID p1_UInt32.
#Event ID 3312: BA::UnRegisterServiceRequest: Orphaning host PID p1_UInt32.
#Event ID 3313: BA::UnRegisterServiceRequest: Terminating second old orphaned host PID p1_UInt32.
#Event ID 3314: BTM::RecvCallback: Timer expired for AgentRequestID p1_UInt32.
#Event ID 3315: BTM::LaunchTask: TaskURI = p1_String TaskID = p2_UInt32, PID = p3_UInt32, HR = p4_UInt32.
#Event ID 3316: GBA::NotifyTaskInstanceCompleted: AgentRequestID = p1_UInt32.
#Event ID 3317: GBA::RegisterServiceRequest: SR = p1_GUID, HR = p2_UInt32.
#Event ID 3318: GBA::UnRegisterServiceRequest: SR = p1_GUID, HR = p2_UInt32.
#Event ID 3319: GBA::RegisterAgentRequest: AgentRequestID = p1_UInt32, type = p2_UInt32, hr = p3_UInt32.
#Event ID 3320: GBA: Cancelling low priority p3_UInt32 agent because high priority p2_UInt32 needs to run: Resource was dedicated = p1_Boolean.
#Event ID 3321: GBA::CancelAgentRequest: AgentRequestID = p1_UInt32, CancelType = p2_UInt32, PID = p3_UInt32, HR = p4_UInt32.
#Event ID 3322: GBA::TryAcquireResourceSet: pending = p1_Boolean, type = p2_UInt32, HR = p3_UInt32.
#Event ID 3323: GBA::AbortTask: AgentRequestID = p1_UInt32, HR = p2_UInt32.
#Event ID 3324: BA::AbortTask: AgentRequestID = p1_UInt32, HR = p2_UInt32.
#Event ID 3325: BA::NotifyTaskHostCompleted: ProductID = p1_GUID, PID = p2_UInt32.
#Event ID 3326: BA::RegisterAgentRequest: ProductID = p1_GUID, AgentRequestID = p2_UInt32, HR = p3_UInt32.
#Event ID 3327: BA::PdcActivationFailed: ProductID = p1_GUID, Reason = p2_UInt32, NTSTATUS = p3_UInt32.
#Event ID 3500: FTM: AllowBackgroundExecution for ProductID p1_GUID.
#Event ID 3501: FTM: Process is using too much memory for BG Execution.
#Event ID 3502: FTM: Removing BG capability from Task ID p1_UInt32 due to OOM.
#Event ID 3503: FTM: Battery Saver State has change.
#Event ID 3504: FTM: Attempted new BG Execution request due to battery state change.
#Event ID 3505: FTM: NotifyTaskInstanceCompleted TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 3506: FTM: NotifyTaskInstancePaused TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 3507: FTM: NotifyTaskInstanceRunning TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 3508: FTM: SendTaskStatusChange TaskID=p1_UInt32 Status=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 3509: FTM: NotifyTaskHostCompleted HRESULT=p1_UInt32.
#Event ID 3510: FTM: Discarding NotifyTaskHostFrozen notification because the host isn't really frozen
#Description
FTM: Discarding NotifyTaskHostFrozen notification because the host isn't really frozen.
Message #
Event ID 3511: FTM: NotifyTaskHostFrozen PID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 3512: FTM: NotifyTaskHostDehydrated HRESULT=p1_UInt32.
#Event ID 3513: FTM: Registering callback p1_String HRESULT=p2_UInt32.
#Event ID 3514: FTM: New Task p1_UInt32 is dehydration-suppressing.
#Event ID 3515: FTM: Applying Dehydration-Suppressing Policy to Host PID p1_UInt32.
#Event ID 3516: FTM: Revoking Dehydration-Suppressing Policy to Host PID p1_UInt32.
#Event ID 3517: FTM: +LaunchTask TaskURI=p1_String LaunchFlags=p2_UInt32.
#Event ID 3518: FTM: -LaunchTask TaskURI=p1_String TaskID=p2_UInt32 PID=p3_UInt32 HRESULT=p4_UInt32.
#Event ID 3519: FTM: ResumeTask TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 3520: FTM: Removing Foreground Resources from TaskID=p1_UInt32.
#Event ID 3521: FTM: SetForegroundTaskInstanceId TaskID=p1_UInt32 HRESULT=p2_Boolean.
#Event ID 3522: FTM: PauseTask TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 3523: FTM: CancelTask TaskID=p1_UInt32 Frozen=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 3524: FTM: AbortTask being ignored because the task is completed TaskID=p1_UInt32.
#Event ID 3525: FTM: AbortTask TaskID=p1_UInt32 Reason=p2_String HRESULT=p3_UInt32.
#Event ID 3526: FTM: SetTaskDehydrationEligibility TaskID=p1_UInt32 State=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 3527: FTM: RequestProcessBackgroundExecution type=p1_UInt32 Pid=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 3528: FTM: CancelProcessBackgroundExecutionRequest type=p1_UInt32 Pid=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 3529: FTM: TaskRunningInBackground TaskID=p1_UInt32 PID=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 3530: FTM: TaskRunningInForeground TaskID=p1_UInt32 PID=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 3531: FTM: Changing activation policy to resume due to BG Execution for ProductID p1_GUID.
#Event ID 3533: FTM: Ignoring expired watchdog for task p1_UInt32 because it is being debugged.
#Event ID 3534: FTM: Watchdog fired for task p1_UInt32 while running in background.
#Event ID 3535: FTM: Request BG Execution Denied because it wasn't running.
#Event ID 3536: FTM: Request BG Execution Denied because product was forbidden.
#Event ID 3537: FTM: Request BG Execution Denied because task didn't have BG abilities in its manifest.
#Event ID 3538: FTM: Request BG Execution Denied due to lack of resources.
#Event ID 3539: FTM: Request BG Execution Denied because battery policy prevented it.
#Event ID 3540: FTM: RequestBGAccess IsAllowed=p1_UInt32 TaskID=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 3541: FTM: RemoveBGRequest RequestedRemoval=p1_UInt32 ActualRemoval=p2_UInt32 TaskID=p3_UInt32 HRESULT=p4_UInt32.
#Event ID 3542: FTM: ForbidBackgroundExecution for ProductID p1_GUID.
#Event ID 3543: FTM: IsValidTaskInstancePid TaskID=p1_UInt32 Pid=p2_UInt32 fValid=p3_Boolean HRESULT=p4_UInt32.
#Event ID 3544: FTM: DetermineBestResourceSet for child ProductID=p1_GUID LaunchFlags=p2_UInt32 ResourceSetType=p3_UInt32.
#Event ID 3545: FTM: OnRelease ResourceSet TaskID=p1_UInt32 ResouceSet=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 3546: FTM:UITask Call to Acquire network reference failed CM_RESULT=p1_UInt32.
#Event ID 3547: FTM:UITask Call to Release network reference failed CM_RESULT=p1_UInt32.
#Event ID 3548: FTM: SetTaskImportanceVector TaskID=p1_UInt32 Vector=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 3549: FTM: +RequestProcessBackgroundExecution type=p1_UInt32 Pid=p2_UInt32.
#Event ID 3550: FTM: +RequestBackgroundExecution type=p1_UInt32.
#Event ID 3551: FTM: -RequestBackgroundExecution type=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 3552: FTM: +RequestBGAccess TaskInstanceId=p1_UInt32 type=p2_UInt32.
#Event ID 3553: FTM: Request BG Execution Denied because DPL policy prevented it.
#Event ID 3554: FTM: Windows Information Protection keys locked state (p1_Boolean).
#Event ID 3650: VoIP: Foreground state for product p1_GUID has changed.
#Event ID 3651: VoIP: Canceling communication agent for product p1_GUID.
#Event ID 3652: VoIP: Timer expired for keep-alive agent of product p1_GUID.
#Event ID 3653: VoIP: Timer expired for incoming call agent of product p1_GUID.
#Event ID 3654: VoIP: Launched agent instance with id p2_UInt32 and URI p1_String.
#Event ID 3655: VoIP: Canceled agent instance with id p1_UInt32.
#Event ID 3656: VoIP: Set active call resource set
#Description
VoIP: Set active call resource set.
Message #
Event ID 3657: VoIP: Set communication agent resource set
#Description
VoIP: Set communication agent resource set.
Message #
Event ID 3658: VoIP: Set VoIP Worker resource set
#Description
VoIP: Set VoIP Worker resource set.
Message #
Event ID 3659: VoIP: Applied terminal resource set
#Description
VoIP: Applied terminal resource set.
Message #
Event ID 3660: VoIP: Last task instance completed.
#Description
VoIP: Last task instance completed. Releasing the task host ...
Message #
Event ID 3661: VoIP: Launching active call agent instance for product p1_GUID.
#Event ID 3662: VoIP: Canceling active call agent for product p1_GUID.
#Event ID 3663: VoIP: Putting an active call on hold for product p1_GUID.
#Event ID 3664: VoIP: Taking an active call off hold for product p1_GUID.
#Event ID 3665: VoIP: Incoming call dialog has been displayed for product p1_GUID.
#Event ID 3666: VoIP: Incoming call dialog has been dismissed for product p1_GUID.
#Event ID 3667: VoIP: Launch communication agent request received from process p1_UInt32 for product p2_GUID.
#Event ID 3668: VoIP: Read settings.
#Event ID 3669: VoIP: Received request to launch agent type p2_UInt32 for product p1_GUID.
#Event ID 3670: VoIP: Task instance p2_UInt32 of product p1_GUID completed.
#Event ID 3671: VoIP: Processing request to launch agent type p2_UInt32 for product p1_GUID.
#Event ID 3672: VoIP: Added VoIPApp object to map for product p1_GUID.
#Event ID 3673: VoIP: Removed VoIPApp object from map for product p1_GUID.
#Event ID 3674: VoIP: Getting VoIPApp object from map for product p1_GUID.
#Event ID 3675: VoIP: Publishing WNF_DEVP_VOIP_ACTIVE_CALL_STATE_CHANGE failed with status p1_UInt32.
#Event ID 3676: VoIP: Subscribing to the WNF_WIFI_CONNECTION_STATUS event failed with status p1_UInt32.
#Event ID 3677: VoIP: Subscribed to WNF_WIFI_CONNECTION_STATUS?
#Event ID 3678: VoIP: WiFi connection status active/dormat?
#Event ID 3679: VoIP: RtlQueryWnfStateData failed trying to query the value of WNF_WIFI_CONNECTION_STATUS.
#Event ID 3680: VoIP: Could not spin up worker for UpdateWiFiStateHelper.
#Event ID 3681: VoIP: In active call?
#Event ID 3682: VoIP: CmUtilSetWiFiActive was not successful.
#Description
VoIP: CmUtilSetWiFiActive was not successful. This could be because WiFi disconnected by the time we were notified of the connection.
Message #
Event ID 3683: VoIP: WiFi connection status is p1_UInt32.
#Event ID 3684: VoIP: AbortTask: TaskInstanceID = p1_UInt32, HR = p2_UInt32.
#Event ID 3685: VoIP: PhoneServiceRestart: HR = p1_UInt32.
#Event ID 3686: VoIP: PhoneServiceRestart: Product = p1_GUID, HR = p2_UInt32.
#Event ID 3687: VoIP: Launching call query info agent instance for product p1_GUID.
#Event ID 3688: VoIP: Canceling call query info agent instance for product p1_GUID.
#Event ID 3689: VoIP: Terminating agents due to low memory for product p1_GUID.
#Event ID 3690: VoIP: Acquired Pending ResourceSet for product = p1_GUID, Resourceset = p2_UInt32.
#Event ID 3691: VoIP: Acquired Pending ResourceSet for product = p1_GUID, Resourceset = p2_UInt32, fApplied = p3_UInt32, HR = p4_UInt32.
#Event ID 3692: VoIP: Set PDC Network Active for product = p1_GUID, NTSTATUS = p2_UInt32.
#Event ID 3693: VoIP: Set PDC Network Inactive for product = p1_GUID, NTSTATUS = p2_UInt32.
#Event ID 3694: VoIP: Renew PDC Network activation failed for product = p1_GUID, NTSTATUS = p2_UInt32.
#Event ID 3699: VoIP: An error occurred.
#Event ID 6100: p0 - [p1 = p2]\n.
#Event ID 6101: p0 - Parsing config file [p1] file size = p2.
#Event ID 6102: p0 - OnTaskModelMessage: Dispatching EM message.
#Event ID 6103: p0 - InitializeTaskHost URI=p1, Page=p2, TaskId=p3.
#Event ID 6104: p0 - Resuming Task from dehydration.
#Event ID 6105: p0 - TaskHandler::GetTaskHandler hr=p1.
#Event ID 6106: p0 - TaskHost Init.
#Event ID 6107: p0 - TaskHost Init hr = p1.
#Event ID 6108: p0 - Host Dispatcher Exiting hr = p1.
#Event ID 6109: p0 - TaskHandlerReady received.
#Event ID 6110: p0 - StartTask TaskId=p1.
#Event ID 6111: p0 - PauseTask TaskId=p1.
#Event ID 6112: p0 - ResumeTask TaskId=p1.
#Event ID 6113: p0 - OnTaskHandlerVisible received.
#Event ID 6114: p0 - OnTaskHandlerHidden received.
#Event ID 6115: p0 - BackgroundExecutionCallback TaskId[p1] Command[p2].
#Event ID 6116: p0 - BackgroundExecutionCallback hr=p1.
#Event ID 6117: p0 - OnHostRunning.
#Event ID 6118: p0 - OnHostRunning.
#Event ID 6119: p0 - Dehydrating.
#Event ID 6120: p0 - Gracefully dehydrating TaskHost.
#Event ID 6121: p0 - TryDehydrateHost.
#Event ID 6122: p0 - DehydrateHost event triggered.
#Event ID 6123: p0 - WaitForUnfreeze hr = p1.
#Event ID 6124: p0 - ReduceMemoryHostCallback hr = p1.
#Event ID 6125: p0 - Graceful tear-down failed.
#Event ID 6126: p0 - BeforeHostRunningInBackgroundCallback.
#Event ID 6127: p0 - BeforeHostRunningInBackgroundCallback.
#Event ID 6128: p0 - AfterHostRunningInBackgroundCallback.
#Event ID 6129: p0 - AfterHostRunningInBackgroundCallback.
#Event ID 6130: p0 - Unhandled exception occurred.
#Event ID 6131: p0 - State-Transition (p1)->(p2).
#Event ID 6132: p0 - EnableProfiling = [p1].
#Event ID 6133: p0 - Profile Dll = [p1].
#Event ID 6134: p0 - ProfilerCLSID = [p1].
#Event ID 6135: p0 - TaskHostHelper::SetProfilerSettings hr = p1.
#Event ID 6136: p0 - File path = p1 : p2.
#Event ID 6137: p0 - Parse Element: p1.
#Event ID 6138: p0 - Parse Element Value = p1 with pwszLocalName = p2.
#Event ID 6139: p0 - Parse HResult = p1.
#Event ID 6140: p0 - YUTHost: failed to GAC trusted assembly p1\r\n.
#Event ID 6141: p0 - UITaskHandler::Initialize.
#Event ID 6142: p0 - UITaskHandler::Disconnect done.
#Event ID 6143: p0 - UITaskHandler::GoBackground.
#Event ID 6144: p0 - UITaskHandler::GoForeground.
#Event ID 6145: p0 - Managed Framework Ready.
#Event ID 6146: p0 - HandlePendingEvents Start TaskId=p1.
#Event ID 6147: p0 - HandlePendingEvents Pause TaskId=p1.
#Event ID 6148: p0 - HandlePendingEvents Resume TaskId=p1.
#Event ID 6149: p0 - Waiting for Siblings.
#Event ID 6150: p0 - Waiting for Siblings done.
#Event ID 6151: p0 - UITaskHandler::OnRuntimeHostReady TaskID:[p1].
#Event ID 6152: p0 - UITaskHandler::OnRuntimeHostReady.
#Event ID 6153: p0 - UITaskHandler::OnRuntimeHostReady hr = p1.
#Event ID 6154: p0 - UITaskHandler::RegistrationComplete hr = p1.
#Event ID 6155: p0 - UITaskHandler::ConnectionComplete received.
#Event ID 6156: p0 - UITaskHandler::ConnectionComplete hr = p1.
#Event ID 6157: p0 - UITaskHandler::ProcessActivationData received, reason=p1.
#Event ID 6158: p0 - UITaskHandler::ProcessActivationData hr = p1.
#Event ID 6159: p0 - UITaskHandler::Show received.
#Event ID 6160: p0 - Navigation in progress.
#Event ID 6161: p0 - UITaskHandler::Show hr = p1.
#Event ID 6162: p0 - UITaskHandler::ShowInternal.
#Event ID 6163: p0 - UITaskHandler::ShowInternal.
#Event ID 6164: p0 - UITaskHandler::Hide received.
#Event ID 6165: p0 - Navigation in progress.
#Event ID 6166: p0 - UITaskHandler::Hide hr = p1.
#Event ID 6167: p0 - UITaskHandler::NavigateTo received TaskID:[p1].
#Event ID 6168: p0 - UITaskHandler::NavigateTo.
#Event ID 6169: p0 - UITaskHandler::NavigationComplete TaskID:[p1].
#Event ID 6170: p0 - UITaskHandler::NavigationComplete hr = p1.
#Event ID 6171: p0 - UITaskHandler::NavigateAway received TaskID:[p1].
#Event ID 6172: p0 - Navigation interrupted since Task is closing.
#Event ID 6173: p0 - Navigation in progress.
#Event ID 6174: p0 - UITaskHandler::NavigateAway hr = p1.
#Event ID 6175: p0 - UITaskHandler::NavigateAwayInternal TaskID:[p1].
#Event ID 6176: p0 - UITaskHandler::NavigateAwayInternal hr = p1.
#Event ID 6177: p0 - UITaskHandler::RequestClose called TaskID:[p1].
#Event ID 6178: p0 - UITaskHandler::RequestClose hr = p1.
#Event ID 6179: p0 - LaunchSession in progress.
#Event ID 6180: p0 - UITaskHandler::LaunchSession hr = p1.
#Event ID 6181: p0 - LaunchChildTask in progress.
#Event ID 6182: p0 - UITaskHandler::LaunchChildTask hr = p1.
#Event ID 6183: p0 - UITaskHandler::SetPauseOnLock[p1] called TaskID:[p2].
#Event ID 6184: p0 - UITaskHandler::SetPauseOnLock hr = p1.
#Event ID 6185: p0 - UITaskHandler::Close received TaskID:[p1].
#Event ID 6186: p0 - UITaskHandler::Close hr = p1.
#Event ID 6187: p0 - UITaskHandler::SystemKeyPressed received: [p1].
#Event ID 6188: p0 - UITaskHandler::SystemKeyPressed processed.
#Event ID 6189: p0 - UITaskHandler::SystemKeyPressed pending.
#Event ID 6190: p0 - UITaskHandler::LaunchChildTaskComplete received with result p1.
#Event ID 6191: p0 - UITaskHandler::LaunchChildTaskComplete result:p1 hr = p2.
#Event ID 6192: p0 - UITaskHandler::LaunchSessionComplete received with result p1.
#Event ID 6193: p0 - UITaskHandler::LaunchChildTaskComplete result:p1 hr = p2.
#Event ID 6194: p0 - OrientationChanged NewOrientation=p1.
#Event ID 6195: p0 - OrientationChange received before RuntimeHostTask is set.
#Event ID 6196: p0 - SetSupportedOrientations.
#Event ID 6197: p0 - GetSupportedOrientations.
#Event ID 6198: p0 - GetCurrentOrientation.
#Event ID 6199: p0 - UITaskHandler::ReplaceTouchEndpoint hr = p1.
#Event ID 6200: p0 - UITaskHandler::ReplaceTextEndpoint hr = p1.
#Event ID 6201: p0 - UITaskHandler::Get Task State.
#Event ID 6202: p0 - UITaskHandler::Set Task State.
#Event ID 6203: p0 - UITaskHandler::OnObscurityChange[p1].
#Event ID 6204: p0 - UITaskHandler::OnLockScreenVisibilityChange[p1].
#Event ID 6205: p0 - UITaskHandler::OnSipVisibilityChange[p1].
#Event ID 6206: p0 - UITaskHandler::OnShowAnimationComplete.
#Event ID 6207: p0 - UITaskHandler::Window.
#Event ID 6208: p0 - FreezeHost event triggered.
#Event ID 6209: p0 - FreezeHostCallback failed with hr = p1.
#Event ID 6210: p0 - CancelTask TaskId=p1.
#Event ID 6211: p0 - OnHostPausing.
#Event ID 6212: p0 - OnHostPausing failed with hr = p1.
#Event ID 6213: p0 - OnHostPaused.
#Event ID 6214: p0 - OnHostPaused failed with hr = p1.
#Event ID 6215: p0 - FreezeHost event triggered.
#Event ID 6216: p0 - FreezeHostCallback failed with hr = p1.
#Event ID 6217: p0 - CancelTask received while executing in background.
#Event ID 6218: p0 - CancelTask received.
#Event ID 6219: p0 - CancelTask hr = p1.
#Event ID 6220: p0 - TPA entry: p1\\p2p3.
#Event ID 6221: p0 - Platform Assemblies List: p1.
#Event ID 6222: p0 - ParseManifestFile HResult = p1.
#Event ID 6223: p0 - NotifyError !
#Event ID 6224: p0 - NotifyError !
#Event ID 6225: p0 - TestTrustedPath: p1.
#Event ID 6226: p0 - TestAppPaths: p1.
#Event ID 6227: p0 - NotifyError !
#Event ID 6228: p0 - GetAppPaths failed with hr = p1.
#Event ID 6229: p0 - NotifyError !
#Event ID 6230: p0 - NotifyError !
#Event ID 6231: p0 - GetIsoStoreAvailableFreeSpace hr = p1.
#Event ID 6232: p0 - NotifyEvent XcpHostEvent_ApplicationStarted.
#Event ID 6233: p0 - NotifyEvent XcpHostEvent_ApplicationStarting.
#Event ID 6234: p0 - NotifyEvent XcpHostEvent_ApplicationConstructing: Assembly = p1, NotifyEvent Type = p2.
#Event ID 6235: p0 - NotifyEvent XcpHostEvent_ApplicationConstructed: Assembly = p1, NotifyEvent Type = p2.
#Event ID 6236: p0 - NotifyEvent XcpHostEvent_AssemblyLoading: Assembly = p1.
#Event ID 6237: p0 - NotifyEvent XcpHostEvent_AssemblyLoaded: Assembly = p1.
#Event ID 6238: p0 - NotifyEvent XcpHostEvent_SourceLoading: XAP = p1.
#Event ID 6239: p0 - NotifyEvent XcpHostEvent_SourceLoaded: XAP = p1.
#Event ID 6240: p0 - GetQualifiedMutexName returned:[p1].
#Event ID 6241: p0 - XcpHost::Start() failed with hr = p1.
#Event ID 6242: p0 - Shutting down the SL runtime.
#Event ID 6243: p0 - Calling into XcpHost::Pausing p1.
#Event ID 6244: p0 - XcpHost::Pausing p1.
#Event ID 6245: p0 - Calling into XcpHost::Pause p1.
#Event ID 6246: p0 - XcpHost::Pause p1.
#Event ID 6247: p0 - Calling into XcpHost::Resume p1.
#Event ID 6248: p0 - XcpHost::Resume p1.
#Event ID 6249: p0 - Calling into XcpHost::Resumed p1.
#Event ID 6250: p0 - XcpHost::Resumed p1.
#Event ID 6251: p0 - XcpHost::CompleteTask called TaskID:[p1].
#Event ID 6252: p0 - CompleteTask called when XcpTask is null.
#Event ID 6253: p0 - Error in OnApplicationStarted.
#Event ID 6254: p0 - Error in OnApplicationConstructing.
#Event ID 6255: p0 - LaunchSession hr = p1.
#Event ID 6256: p0 - LaunchChildTask hr = p1.
#Event ID 6257: p0 - Raising Task.
#Event ID 6258: p0 - Raised Task.
#Event ID 6259: p0 - Raising Task.
#Event ID 6260: p0 - Raised Task.
#Event ID 6261: p0 - Raising Task.
#Event ID 6262: p0 - Raised Task.
#Event ID 6263: p0 - Raising Task.
#Event ID 6264: p0 - Raised Task.
#Event ID 6265: p0 - Raising Task.
#Event ID 6266: p0 - Raised Task.
#Event ID 6267: p0 - Raising Task.
#Event ID 6268: p0 - Raised Task.
#Event ID 6269: p0 - Raising Task.
#Event ID 6270: p0 - Raised Task.
#Event ID 6271: p0 - Raising Task.
#Event ID 6272: p0 - Raised Task.
#Event ID 6273: p0 - Raising Task.
#Event ID 6274: p0 - Raised Task.
#Event ID 6275: p0 - Raising Task.
#Event ID 6276: p0 - Raised Task.
#Event ID 6277: p0 - Raising Task.
#Event ID 6278: p0 - Raised Task.
#Event ID 6279: p0 - Raising Task.
#Event ID 6280: p0 - Raised Task.
#Event ID 6281: p0 - Raising Task.
#Event ID 6282: p0 - Raised Task.
#Event ID 6283: p0 - Raising Task.
#Event ID 6284: p0 - Raised Task.
#Event ID 6285: p0 - Raising Task.
#Event ID 6286: p0 - Raised Task.
#Event ID 6287: p0 - RegisterAppCallbacks hr = p1.
#Event ID 6288: p0 - RegisterTaskCallbacks hr = p1.
#Event ID 6289: p0 - TaskReadyToShow hr = p1.
#Event ID 6290: p0 - RequestCloseTask hr = p1.
#Event ID 6291: p0 - CompleteTask hr = p1.
#Event ID 6292: p0 - DestroyTaskCallbacks hr = p1.
#Event ID 6293: p0 - SetHostErrorCode hrHostError = p1, hr = p2.
#Event ID 6294: p0 - LaunchSession[p1] hr = p2.
#Event ID 6295: p0 - GetTaskState hr = p1.
#Event ID 6296: p0 - SetTaskState hr = p1.
#Event ID 6297: p0 - LaunchChildTask[p1] hr = p2.
#Event ID 6298: p0 - GetTaskAppChromeHandle hr = p1.
#Event ID 6299: p0 - SetTaskPauseOnLock hr = p1.
#Event ID 6300: p0 - SetHostObscurity[p1] hr = p2.
#Event ID 6301: p0 - Entering Modal state.
#Event ID 6302: p0 - Exiting Modal state hr = p1.
#Event ID 6303: p0 - NotifyError: message=p1, source=p2.
#Event ID 6304: p0 - NotifyEvent XcpHostEvent_ApplicationStarted.
#Event ID 6305: p0 - NotifyEvent XcpHostEvent_ApplicationStarting.
#Event ID 6306: p0 - NotifyEvent XcpHostEvent_ApplicationConstructing: Assembly = p1, NotifyEvent Type = p2.
#Event ID 6307: p0 - NotifyEvent XcpHostEvent_ApplicationConstructed: Assembly = p1, NotifyEvent Type = p2.
#Event ID 6308: p0 - NotifyEvent XcpHostEvent_AssemblyLoading: Assembly = p1.
#Event ID 6309: p0 - NotifyEvent XcpHostEvent_AssemblyLoaded: Assembly = p1.
#Event ID 6310: p0 - NotifyEvent XcpHostEvent_SourceLoading: XAP = p1.
#Event ID 6311: p0 - NotifyEvent XcpHostEvent_SourceLoaded: XAP = p1.
#Event ID 6312: p0 - Raising Task.
#Event ID 6313: p0 - Raised Task.
#Event ID 6314: p0 - UITaskHandler::RequestNavigateBack called TaskID:[p1].
#Event ID 6315: p0 - UITaskHandler::RequestNavigateBack hr = p1.
#Event ID 6316: p0 - RequestNavigateBack hr = p1.
#Event ID 6317: p0 - UITaskHandler::SetFullScreen[p1] called TaskID:[p2].
#Event ID 6318: p0 - UITaskHandler::SetFullScreen hr = p1.
#Event ID 6319: p0 - SetTaskFullScreen hr = p1.
#Event ID 6320: p0 - Raising Task.
#Event ID 6321: p0 - Raised Task.
#Event ID 6322: p0 - Raising Task.
#Event ID 6323: p0 - Raised Task.
#Event ID 6324: p0 - ApplicationLayerChanged NewApplicationLayer=p1.
#Event ID 6325: p0 - ApplicationLayerChange received before RuntimeHostTask is set.
#Event ID 6326: p0 - AgTaskHandler::LaunchSession hr = p1.
#Event ID 6327: p0 - AgTaskHandler::LaunchChildTask hr = p1.
#Event ID 6328: p0 - GetSessionDisplayName.
#Event ID 6329: p0 - AgTaskHandler::ConnectionComplete received.
#Event ID 6330: p0 - AgTaskHandler::ConnectionComplete hr = p1.
#Event ID 6331: p0 - UITaskHandler::OnNavigationBarVisibilityChange[p1].
#Event ID 6332: p0 - Raising Task.
#Event ID 6333: p0 - Raised Task.
#Event ID 6334: p0 - UITaskHandler::LaunchModernChooser hr = p1.
#Event ID 6335: p0 - LaunchChildTask hr = p1.
#Event ID 6336: p0 - LaunchModernChooser[p1] hr = p2.
#Event ID 6337: p0 - TaskFirstPresentCompleted = p1.
#Event ID 6338: p0 - UITaskHandler::FirstPresentCompleted called TaskID:[p1].
#Event ID 6339: p0 - UITaskHandler::FirstPresentCompleted hr = p1.
#Event ID 6350: GlobalMemStats
#Fields #
| Name | Description |
|---|---|
CommitTotal UInt64 | |
CommitLimit UInt64 | |
CommitPeak UInt64 | |
PhysicalTotal UInt64 | |
PhysicalAvailable UInt64 | |
SystemCache UInt64 | |
KernelTotal UInt64 | |
KernelPaged UInt64 | |
KernelNonpaged UInt64 | |
PageSize UInt64 | |
HandleCount UInt64 | |
ProcessCount UInt64 | |
ThreadCount UInt64 |
Event ID 6351: ProcessMemStats
#Fields #
| Name | Description |
|---|---|
ProcessId UInt32 | |
ProcessName UnicodeString | |
ProductID GUID | |
IsForeground Boolean | |
PageFaultCount UInt64 | |
WorkingSetSize UInt64 | |
PeakWorkingSetSize UInt64 | |
QuotaPeakPagedPoolUsage UInt64 | |
QuotaPagedPoolUsage UInt64 | |
QuotaPeakNonPagedPoolUsage UInt64 | |
QuotaNonPagedPoolUsage UInt64 | |
PagefileUsage UInt64 | |
PeakPagefileUsage UInt64 |
Event ID 8100: AgHost - FrameworkView::Initialize HRESULT=p1_UInt32.
#Event ID 8101: AgHost - FrameworkView::SetWindow HRESULT=p1_UInt32.
#Event ID 8102: AgHost - FrameworkView::Load HRESULT=p1_UInt32.
#Event ID 8103: AgHost - FrameworkView::Run HRESULT=p1_UInt32.
#Event ID 8104: AgHost - FrameworkView::Uninitialize HRESULT=p1_UInt32.
#Event ID 8105: AgHost - FrameworkView::OnActivated PreviousExecutionState=p1_UInt32 ActivationKind=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 8106: AgHost - FrameworkView::OnExiting HRESULT=p1_UInt32.
#Event ID 8107: AgHost - FrameworkView::OnResuming HRESULT=p1_UInt32.
#Event ID 8108: AgHost - FrameworkView::OnSuspending HRESULT=p1_UInt32.
#Event ID 8110: AgHostSvcs - EmCancelTaskInstance TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8111: AgHostSvcs - EmCreateTaskInstance TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8112: AgHostSvcs - EmExitTaskHost HRESULT=p1_UInt32.
#Event ID 8113: AgHostSvcs - EmPauseTaskInstance TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8114: AgHostSvcs - EmResumeTaskInstance TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8115: AgHostSvcs - EmSetTaskInstanceApplicationUri TaskID=p1_UInt32 ApplicationUri=p2_String HRESULT=p3_UInt32.
#Event ID 8116: AgHostSvcs - EmSetTaskInstanceArguments TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8117: AgHostSvcs - EmSetTaskInstanceBackgroundTaskId TaskID=p1_UInt32 BackgroundTaskID=p2_GUID HRESULT=p3_UInt32.
#Event ID 8118: AgHostSvcs - EmSetTaskInstanceNavigationPage TaskID=p1_UInt32 NavigationPage=p2_String HRESULT=p3_UInt32.
#Event ID 8119: AgHostSvcs - EmStartTaskInstance TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8120: AgHostSvcs - TaskCompleted TaskID=p1_UInt32 CompletionCode=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 8121: AgHostSvcs - TaskPaused TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8122: AgHostSvcs - TaskRunning TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8123: AgHostSvcs - TaskRunningInBackground TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8124: AgHostSvcs - TaskRunningInForeground TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8125: AgHostSvcs - EmWaitForTaskInstanceCompleted TaskID=p1_UInt32 CompletionCode=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 8126: AgHostSvcs - OnModernContractActivation TaskID=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8200: EEC: GetExtendedExecutionBroker ProcessId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8201: EEC: RegisterRevokedHandler ProcessId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8202: EEC: RequestExtendedExecution ProcessId=p1_UInt32 Reason=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 8203: EEC: ExtensionRevokedCallback ProcessId=p1_UInt32 Reason=p2_UInt32 HRESULT=p3_UInt32.
#Event ID 8204: EEC: CompleteExtendedExecution ProcessId=p1_UInt32 HRESULT=p2_UInt32.
#Event ID 8300: ODB: LaunchTask - UserSid: UserSid SessionId: SessionId PackageFullName: PackageFullName EntryPoint: EntryPoint WorkItemId: WorkItemId HRESULT: HRESULT.
#Description
ODB: LaunchTask - UserSid: UserSid SessionId: SessionId PackageFullName: PackageFullName EntryPoint: EntryPoint WorkItemId: WorkItemId HRESULT: HRESULT.
Message #
Fields #
| Name | Description |
|---|---|
UserSid SID | |
SessionId UInt32 | |
PackageFullName UnicodeString | |
EntryPoint UnicodeString | |
WorkItemId GUID | |
HRESULT UInt32 |
Event ID 8301: ODB: CancelTask - UserSid: UserSid SessionId: SessionId WorkItemId: WorkItemId RudeTerminate: RudeTerminate CancellationReason: CancelationReason HRESULT: HRESULT.
#Description
ODB: CancelTask - UserSid: UserSid SessionId: SessionId WorkItemId: WorkItemId RudeTerminate: RudeTerminate CancellationReason: CancelationReason HRESULT: HRESULT.
Message #
Fields #
| Name | Description |
|---|---|
UserSid SID | |
SessionId UInt32 | |
WorkItemId GUID | |
RudeTerminate Boolean | |
CancelationReason UInt32 | |
HRESULT UInt32 |
Event ID 8302: ODB: BeforeTaskActivated - WorkItemId: WorkItemId PsmKey: PsmKey HostJobType: HostJobType HRESULT: HRESULT.
#Event ID 8303: ODB: TaskActivated - WorkItemId: WorkItemId TaskInstanceId: TaskInstanceId PsmKey: PsmKey HRESULT: HRESULT.
#Event ID 8304: ODB: TaskCompleted - WorkItemId: WorkItemId TaskInstanceId: TaskInstanceId HRESULT: HRESULT.
#Event ID 8305: ODB: TaskCanceled - WorkItemId: WorkItemId TaskInstanceId: TaskInstanceId HRESULT: HRESULT.
#Event ID 8306: ODB: Timeout in WaitForWnfStateQuiescentTimeout.
#Description
ODB: Timeout in WaitForWnfStateQuiescentTimeout.
Message #
Event ID 8307: ODB: CancelBackgroundTaskWithWnf WorkItemId: p1_GUID.
#Event ID 10001: p1: p2.
#Event ID 10002: *** ExecFailFast *** p1_String.
#Event ID 10010: PreInstallTaskPolicy: Activate task for User = UserSid HRESULT = HRESULT.
#Event ID 10011: PreInstallTaskPolicy: BiActivate WorkItemId = WorkItemId for user = UserSid, PackageFullName = PackageFullName, EntryPoint = EntryPoint, HRESULT = HRESULT.
#Description
PreInstallTaskPolicy: BiActivate WorkItemId = WorkItemId for user = UserSid, PackageFullName = PackageFullName, EntryPoint = EntryPoint, HRESULT = HRESULT.
Message #
Fields #
| Name | Description |
|---|---|
WorkItemId GUID | |
UserSid UnicodeString | |
PackageFullName UnicodeString | |
EntryPoint UnicodeString | |
HRESULT UInt32 |
Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID eb65a492-86c0-406a-bace-9912d595bd69
Defined in Microsoft-Windows-AppModelExecEvents.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02