detection.wiki

Microsoft-Windows-AppModel-State

EventTitleChannelSampleRule
1Error while deleting file: Error_while_deleting_file.DebugNN
2Error while deleting directory: Error_while_deleting_directory.DebugNN
3Error while allocating memoryDebugNN
4ApiSet Function: ErrorString returned with Error Code: Error.DebugNN
5Low-level data store access error.DebugNN
6Cleanup of temporary state has been skipped due to low disk usage.DebugNN
7Cleanup of temporary state has completed.DebugNN
8Cleanup of temporary state was unable to enumerate the user profiles.DebugNN
9Cleanup of temporary state has aborted unexpectedly.DebugNN
10Failure to load the application settings for package ErrorString.ApplicationNN
11Failure to read an application setting for package ErrorString.ApplicationNN
12Failure to write an application setting for package ErrorString.ApplicationNN
13Failure to instantiate storage folder FolderString for package PackageString …ApplicationNN
14Need to update state locations of package PackageString for user UserSid because …DebugNN
15Need to update state locations of package PackageString for user UserSid because …DebugNN
16Need to update state locations of package PackageString for user UserSid because …DebugNN
17Need to update state locations of package PackageString for user UserSid because …DebugNN
18Succeeded to fix state locations for package InformationalString.DebugNN
19Failure to fix state locations for package ErrorString.DebugNN
20Triggered repair because operation Operation against package PackageFamily hit …ApplicationNN
21Repair for operation Operation against package PackageFamily with error …ApplicationNN
22Folder path FolderPath failed access check: Error Code: Error.ApplicationNN
23Triggered repair of state locations because operation Operation against package …ApplicationYN
24Repair of state locations for operation Operation against package PackageFamily …ApplicationYN
50AppModel.Task.State.WriteSettingStartDiagnosticNN
51AppModel.Task.State.WriteSettingStopDiagnosticNN
60AppModel.Task.State.ReadSettingStartDiagnosticNN
61AppModel.Task.State.ReadSettingStopDiagnosticNN
70AppModel.Task.State.DeleteSettingStartDiagnosticNN
71AppModel.Task.State.DeleteSettingStopDiagnosticNN
80AppModel.Task.State.WriteSettingInAtomStartDiagnosticNN
81AppModel.Task.State.WriteSettingInAtomStopDiagnosticNN
90AppModel.Task.State.ReadSettingInAtomStartDiagnosticNN
91AppModel.Task.State.ReadSettingInAtomStopDiagnosticNN
100AppModel.Task.State.DeleteSettingInAtomStartDiagnosticNN
101AppModel.Task.State.DeleteSettingInAtomStopDiagnosticNN
110AppModel.Task.State.CommitAtomStartDiagnosticNN
111AppModel.Task.State.CommitAtomStopDiagnosticNN
120AppModel.Task.State.LoadAppHiveStartDiagnosticNN
121AppModel.Task.State.LoadAppHiveStopDiagnosticNN
150AppModel.Task.StateWinRT.AppDataFactory_ActivationStartDiagnosticNN
151AppModel.Task.StateWinRT.AppDataFactory_ActivationStopDiagnosticNN
160AppModel.Task.StateWinRT.ApplicationDataServer_LifespanStartDiagnosticNN
161AppModel.Task.StateWinRT.ApplicationDataServer_LifespanStopDiagnosticNN
170AppModel.Task.StateWinRT.ApplicationDataServer_GetVersionStartDiagnosticNN
171AppModel.Task.StateWinRT.ApplicationDataServer_GetVersionStopDiagnosticNN
180AppModel.Task.StateWinRT.ApplicationDataServer_SetVersionStartDiagnosticNN
181AppModel.Task.StateWinRT.ApplicationDataServer_SetVersionStopDiagnosticNN
190AppModel.Task.StateWinRT.ApplicationDataServer_RoamingStorageQuotaStartDiagnosticNN
191AppModel.Task.StateWinRT.ApplicationDataServer_RoamingStorageQuotaStopDiagnosticNN
210AppModel.Task.StateWinRT.ApplicationDataServer_ActivateContainerServerStartDiagnosticNN
211AppModel.Task.StateWinRT.ApplicationDataServer_ActivateContainerServerStopDiagnosticNN
220AppModel.Task.StateWinRT.ApplicationDataServer_ActivateFileItemServerStartDiagnosticNN
221AppModel.Task.StateWinRT.ApplicationDataServer_ActivateFileItemServerStopDiagnosticNN
230AppModel.Task.StateWinRT.ApplicationDataContainerServer_LifespanStartDiagnosticNN
231AppModel.Task.StateWinRT.ApplicationDataContainerServer_LifespanStopDiagnosticNN
240AppModel.Task.StateWinRT.ApplicationDataContainerServer_GetValuesStartDiagnosticNN
241AppModel.Task.StateWinRT.ApplicationDataContainerServer_GetValuesStopDiagnosticNN
250AppModel.Task.StateWinRT.ApplicationDataContainerServer_GetContainersStartDiagnosticNN
251AppModel.Task.StateWinRT.ApplicationDataContainerServer_GetContainersStopDiagnosticNN
260AppModel.Task.StateWinRT.ApplicationDataContainerServer_CreateContainerStartDiagnosticNN
261AppModel.Task.StateWinRT.ApplicationDataContainerServer_CreateContainerStopDiagnosticNN
270AppModel.Task.StateWinRT.ApplicationDataContainerServer_DeleteContainerStartDiagnosticNN
271AppModel.Task.StateWinRT.ApplicationDataContainerServer_DeleteContainerStopDiagnosticNN
280AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_LifespanStartDiagnosticNN
281AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_LifespanStopDiagnosticNN
290AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_LookupStartDiagnosticNN
291AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_LookupStopDiagnosticNN
300AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_SizeStartDiagnosticNN
301AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_SizeStopDiagnosticNN
310AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_HasKeyStartDiagnosticNN
311AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_HasKeyStopDiagnosticNN
320AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_GetViewStartDiagnosticNN
321AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_GetViewStopDiagnosticNN
330AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_InsertStartDiagnosticNN
331AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_InsertStopDiagnosticNN
340AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_RemoveStartDiagnosticNN
341AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_RemoveStopDiagnosticNN
350AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_ClearStartDiagnosticNN
351AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_ClearStopDiagnosticNN
360AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_FirstStartDiagnosticNN
361AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_FirstStopDiagnosticNN
370AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_LifespanStartDiagnosticNN
371AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_LifespanStopDiagnosticNN
380AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_LookupStartDiagnosticNN
381AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_LookupStopDiagnosticNN
390AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_SizeStartDiagnosticNN
391AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_SizeStopDiagnosticNN
400AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_HasKeyStartDiagnosticNN
401AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_HasKeyStopDiagnosticNN
410AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_GetViewStartDiagnosticNN
411AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_GetViewStopDiagnosticNN
420AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_InsertStartDiagnosticNN
421AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_InsertStopDiagnosticNN
430AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_RemoveStartDiagnosticNN
431AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_RemoveStopDiagnosticNN
440AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_ClearStartDiagnosticNN
441AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_ClearStopDiagnosticNN
450AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_FirstStartDiagnosticNN
451AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_FirstStopDiagnosticNN
460AppModel.Task.StateWinRT.RoamingRpcSignalStartDiagnosticNN
461AppModel.Task.StateWinRT.RoamingRpcSignalStopDiagnosticNN
470AppModel.Task.StateWinRT.DataChangedEventDispatchStartDiagnosticNN
471AppModel.Task.StateWinRT.DataChangedEventDispatchStopDiagnosticNN
480AppModel.Task.StateWinRT.TempCleanupStartDiagnosticNN
481AppModel.Task.StateWinRT.TempCleanupStopDiagnosticNN
490AppModel.Task.StateWinRT.ApplicationDataServer_ForUserStartDiagnosticNN
491AppModel.Task.StateWinRT.ApplicationDataServer_ForUserStopDiagnosticNN

Event ID 1: Error while deleting file: Error_while_deleting_file.

#
Channel
Debug

Description

Error while deleting file: Error_while_deleting_file. Error Code: Error_Code.

Message #

Error while deleting file: %1. Error Code: %2

Fields #

NameDescription
ErrorString UnicodeString
Error Int32

Event ID 2: Error while deleting directory: Error_while_deleting_directory.

#
Channel
Debug

Description

Error while deleting directory: Error_while_deleting_directory. Error Code: Error_Code.

Message #

Error while deleting directory: %1. Error Code: %2

Fields #

NameDescription
ErrorString UnicodeString
Error Int32

Event ID 3: Error while allocating memory

#
Channel
Debug

Event ID 4: ApiSet Function: ErrorString returned with Error Code: Error.

#
Channel
Debug

Message #

ApiSet Function: %1 returned with Error Code: %2

Fields #

NameDescription
ErrorString UnicodeString
Error Int32

Event ID 5: Low-level data store access error.

#
Channel
Debug

Description

Low-level data store access error. Function: ErrorString returned with Error Code: Error.

Message #

Low-level data store access error. Function: %1 returned with Error Code: %2

Fields #

NameDescription
ErrorString UnicodeString
Error Int32

Event ID 6: Cleanup of temporary state has been skipped due to low disk usage.

#
Channel
Debug

Event ID 7: Cleanup of temporary state has completed.

#
Channel
Debug

Event ID 8: Cleanup of temporary state was unable to enumerate the user profiles.

#
Channel
Debug

Description

Cleanup of temporary state was unable to enumerate the user profiles. Object: ErrorString, Error Code: Error.

Message #

Cleanup of temporary state was unable to enumerate the user profiles.  Object: %1, Error Code: %2.

Fields #

NameDescription
ErrorString UnicodeString
Error Int32

Event ID 9: Cleanup of temporary state has aborted unexpectedly.

#
Channel
Debug

Event ID 10: Failure to load the application settings for package ErrorString.

#
Channel
Application

Description

Failure to load the application settings for package ErrorString. Error Code: Error.

Message #

Failure to load the application settings for package %1. Error Code: %2

Fields #

NameDescription
ErrorString UnicodeString
Error Int32

Event ID 11: Failure to read an application setting for package ErrorString.

#
Channel
Application

Description

Failure to read an application setting for package ErrorString. Error Code: Error.

Message #

Failure to read an application setting for package %1. Error Code: %2

Fields #

NameDescription
ErrorString UnicodeString
Error Int32

Event ID 12: Failure to write an application setting for package ErrorString.

#
Channel
Application

Description

Failure to write an application setting for package ErrorString. Error Code: Error.

Message #

Failure to write an application setting for package %1. Error Code: %2

Fields #

NameDescription
ErrorString UnicodeString
Error Int32

Event ID 13: Failure to instantiate storage folder FolderString for package PackageString with Error Code: Error.

#
Channel
Application

Message #

Failure to instantiate storage folder %1 for package %2 with Error Code: %3

Fields #

NameDescription
FolderString UnicodeString
PackageString UnicodeString
Error Int32

Event ID 14: Need to update state locations of package PackageString for user UserSid because the schema is not found.

#
Channel
Debug

Description

Need to update state locations of package PackageString for user UserSid because the schema is not found. Error Code: Error.

Message #

Need to update state locations of package %1 for user %2 because the schema is not found. Error Code: %3

Fields #

NameDescription
PackageString UnicodeString
UserSid UnicodeString
Error Int32

Event ID 15: Need to update state locations of package PackageString for user UserSid because the package is not found.

#
Channel
Debug

Description

Need to update state locations of package PackageString for user UserSid because the package is not found. Error Code: Error.

Message #

Need to update state locations of package %1 for user %2 because the package is not found. Error Code: %3

Fields #

NameDescription
PackageString UnicodeString
UserSid UnicodeString
Error Int32

Event ID 16: Need to update state locations of package PackageString for user UserSid because the package full name has changed.

#
Channel
Debug

Description

Need to update state locations of package PackageString for user UserSid because the package full name has changed. Error Code: Error.

Message #

Need to update state locations of package %1 for user %2 because the package full name has changed. Error Code: %3

Fields #

NameDescription
PackageString UnicodeString
UserSid UnicodeString
Error Int32

Event ID 17: Need to update state locations of package PackageString for user UserSid because the schema version has changed.

#
Channel
Debug

Description

Need to update state locations of package PackageString for user UserSid because the schema version has changed. Error Code: Error.

Message #

Need to update state locations of package %1 for user %2 because the schema version has changed. Error Code: %3

Fields #

NameDescription
PackageString UnicodeString
UserSid UnicodeString
Error Int32

Event ID 18: Succeeded to fix state locations for package InformationalString.

#
Channel
Debug

Message #

Succeeded to fix state locations for package %1.

Fields #

NameDescription
InformationalString UnicodeString

Event ID 19: Failure to fix state locations for package ErrorString.

#
Channel
Debug

Description

Failure to fix state locations for package ErrorString. Error Code: Error.

Message #

Failure to fix state locations for package %1. Error Code: %2

Fields #

NameDescription
ErrorString UnicodeString
Error Int32

Event ID 20: Triggered repair because operation Operation against package PackageFamily hit error OperationError.

#
Channel
Application

Message #

Triggered repair because operation %1 against package %2 hit error %3.

Fields #

NameDescription
Operation UnicodeString
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
PackageFamily UnicodeString
OperationError Int32

Event ID 21: Repair for operation Operation against package PackageFamily with error OperationError returned Error Code: RepairTriggerError.

#
Channel
Application

Message #

Repair for operation %1 against package %2 with error %3 returned Error Code: %4

Fields #

NameDescription
Operation UnicodeString
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
PackageFamily UnicodeString
OperationError Int32
RepairTriggerError Int32

Event ID 22: Folder path FolderPath failed access check: Error Code: Error.

#
Channel
Application

Message #

Folder path %1 failed access check: Error Code: %2

Fields #

NameDescription
FolderPath UnicodeString
Error Int32

Event ID 23: Triggered repair of state locations because operation Operation against package PackageFamily hit error OperationError.

#
Channel
Application
Level
Warning

Message #

Triggered repair of state locations because operation %1 against package %2 hit error %3.

Fields #

NameDescription
Operation UnicodeString
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
PackageFamily UnicodeString
OperationError Int32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppModel-State",
    "guid": "{bff15e13-81bf-45ee-8b16-7cfead00da86}",
    "event_source_name": "",
    "event_id": 23,
    "version": 0,
    "level": 3,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-04-18 00:27:42.386351+00:00",
    "event_record_id": 22,
    "correlation": {
      "ActivityID": "",
      "RelatedActivityID": ""
    },
    "execution": {
      "process_id": 6800,
      "thread_id": 6816
    },
    "channel": "Application",
    "computer": "WIN11-25H2-X64",
    "security": {
      "user_id": "S-1-5-21-3798294047-1846905762-1150995898-1001"
    }
  },
  "event_data": {
    "Operation": "InitializeDataChangedSignaler",
    "PackageFamily": "Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy",
    "OperationError": "-2147024894"
  },
  "message": "Triggered repair of state locations because operation InitializeDataChangedSignaler against package Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy hit error -2147024894."
}

Event ID 24: Repair of state locations for operation Operation against package PackageFamily with error OperationError returned Error Code: RepairTriggerError.

#
Channel
Application
Level
Warning

Message #

Repair of state locations for operation %1 against package %2 with error %3 returned Error Code: %4

Fields #

NameDescription
Operation UnicodeString
Known values
%%2456
Open key file.
%%2457
Delete key file.
%%2458
Read persisted key from file.
%%2459
Write persisted key to file.
%%2464
Export of persistent cryptographic key.
%%2465
Import of persistent cryptographic key.
%%2480
Open Key.
%%2481
Create Key.
%%2482
Delete Key.
%%2483
Encrypt.
%%2484
Decrypt.
%%2485
Sign hash.
%%2486
Secret agreement.
%%2487
Domain settings.
%%2488
Local settings.
%%2489
Add provider.
%%2490
Remove provider.
%%2491
Add context.
%%2492
Remove context.
%%2493
Add function.
%%2494
Remove function.
%%2495
Add function provider.
%%2496
Remove function provider.
%%2497
Add function property.
%%2498
Remove function property.
%%2499
Machine key.
%%2500
User key.
%%2501
Key Derivation.
%%2502
Claim Creation.
%%2503
Claim Verification.
PackageFamily UnicodeString
OperationError Int32
RepairTriggerError Int32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-AppModel-State",
    "guid": "{bff15e13-81bf-45ee-8b16-7cfead00da86}",
    "event_source_name": "",
    "event_id": 24,
    "version": 0,
    "level": 3,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036854775808,
    "time_created": "2026-04-18 00:27:42.493576+00:00",
    "event_record_id": 23,
    "correlation": {
      "ActivityID": "",
      "RelatedActivityID": ""
    },
    "execution": {
      "process_id": 6800,
      "thread_id": 6816
    },
    "channel": "Application",
    "computer": "WIN11-25H2-X64",
    "security": {
      "user_id": "S-1-5-21-3798294047-1846905762-1150995898-1001"
    }
  },
  "event_data": {
    "Operation": "InitializeDataChangedSignaler",
    "PackageFamily": "Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy",
    "OperationError": "-2147024894",
    "RepairTriggerError": "0"
  },
  "message": "Repair of state locations for operation InitializeDataChangedSignaler against package Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy with error -2147024894 returned Error Code: 0"
}

Event ID 50: AppModel.Task.State.WriteSettingStart

#
Channel
Diagnostic
Task
AppModel.Task.State.WriteSetting
Opcode
Start

Event ID 51: AppModel.Task.State.WriteSettingStop

#
Channel
Diagnostic
Task
AppModel.Task.State.WriteSetting
Opcode
Stop

Event ID 60: AppModel.Task.State.ReadSettingStart

#
Channel
Diagnostic
Task
AppModel.Task.State.ReadSetting
Opcode
Start

Event ID 61: AppModel.Task.State.ReadSettingStop

#
Channel
Diagnostic
Task
AppModel.Task.State.ReadSetting
Opcode
Stop

Event ID 70: AppModel.Task.State.DeleteSettingStart

#
Channel
Diagnostic
Task
AppModel.Task.State.DeleteSetting
Opcode
Start

Event ID 71: AppModel.Task.State.DeleteSettingStop

#
Channel
Diagnostic
Task
AppModel.Task.State.DeleteSetting
Opcode
Stop

Event ID 80: AppModel.Task.State.WriteSettingInAtomStart

#
Channel
Diagnostic
Task
AppModel.Task.State.WriteSettingInAtom
Opcode
Start

Event ID 81: AppModel.Task.State.WriteSettingInAtomStop

#
Channel
Diagnostic
Task
AppModel.Task.State.WriteSettingInAtom
Opcode
Stop

Event ID 90: AppModel.Task.State.ReadSettingInAtomStart

#
Channel
Diagnostic
Task
AppModel.Task.State.ReadSettingInAtom
Opcode
Start

Event ID 91: AppModel.Task.State.ReadSettingInAtomStop

#
Channel
Diagnostic
Task
AppModel.Task.State.ReadSettingInAtom
Opcode
Stop

Event ID 100: AppModel.Task.State.DeleteSettingInAtomStart

#
Channel
Diagnostic
Task
AppModel.Task.State.DeleteSettingInAtom
Opcode
Start

Event ID 101: AppModel.Task.State.DeleteSettingInAtomStop

#
Channel
Diagnostic
Task
AppModel.Task.State.DeleteSettingInAtom
Opcode
Stop

Event ID 110: AppModel.Task.State.CommitAtomStart

#
Channel
Diagnostic
Task
AppModel.Task.State.CommitAtom
Opcode
Start

Event ID 111: AppModel.Task.State.CommitAtomStop

#
Channel
Diagnostic
Task
AppModel.Task.State.CommitAtom
Opcode
Stop

Event ID 120: AppModel.Task.State.LoadAppHiveStart

#
Channel
Diagnostic
Task
AppModel.Task.State.LoadAppHive
Opcode
Start

Event ID 121: AppModel.Task.State.LoadAppHiveStop

#
Channel
Diagnostic
Task
AppModel.Task.State.LoadAppHive
Opcode
Stop

Event ID 150: AppModel.Task.StateWinRT.AppDataFactory_ActivationStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.AppDataFactory_Activation
Opcode
Start

Event ID 151: AppModel.Task.StateWinRT.AppDataFactory_ActivationStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.AppDataFactory_Activation
Opcode
Stop

Event ID 160: AppModel.Task.StateWinRT.ApplicationDataServer_LifespanStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_Lifespan
Opcode
Start

Event ID 161: AppModel.Task.StateWinRT.ApplicationDataServer_LifespanStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_Lifespan
Opcode
Stop

Event ID 170: AppModel.Task.StateWinRT.ApplicationDataServer_GetVersionStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_GetVersion
Opcode
Start

Event ID 171: AppModel.Task.StateWinRT.ApplicationDataServer_GetVersionStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_GetVersion
Opcode
Stop

Event ID 180: AppModel.Task.StateWinRT.ApplicationDataServer_SetVersionStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_SetVersion
Opcode
Start

Event ID 181: AppModel.Task.StateWinRT.ApplicationDataServer_SetVersionStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_SetVersion
Opcode
Stop

Event ID 190: AppModel.Task.StateWinRT.ApplicationDataServer_RoamingStorageQuotaStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_RoamingStorageQuota
Opcode
Start

Event ID 191: AppModel.Task.StateWinRT.ApplicationDataServer_RoamingStorageQuotaStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_RoamingStorageQuota
Opcode
Stop

Event ID 210: AppModel.Task.StateWinRT.ApplicationDataServer_ActivateContainerServerStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_ActivateContainerServer
Opcode
Start

Event ID 211: AppModel.Task.StateWinRT.ApplicationDataServer_ActivateContainerServerStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_ActivateContainerServer
Opcode
Stop

Event ID 220: AppModel.Task.StateWinRT.ApplicationDataServer_ActivateFileItemServerStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_ActivateFileItemServer
Opcode
Start

Event ID 221: AppModel.Task.StateWinRT.ApplicationDataServer_ActivateFileItemServerStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_ActivateFileItemServer
Opcode
Stop

Event ID 230: AppModel.Task.StateWinRT.ApplicationDataContainerServer_LifespanStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerServer_Lifespan
Opcode
Start

Event ID 231: AppModel.Task.StateWinRT.ApplicationDataContainerServer_LifespanStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerServer_Lifespan
Opcode
Stop

Event ID 240: AppModel.Task.StateWinRT.ApplicationDataContainerServer_GetValuesStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerServer_GetValues
Opcode
Start

Event ID 241: AppModel.Task.StateWinRT.ApplicationDataContainerServer_GetValuesStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerServer_GetValues
Opcode
Stop

Event ID 250: AppModel.Task.StateWinRT.ApplicationDataContainerServer_GetContainersStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerServer_GetContainers
Opcode
Start

Event ID 251: AppModel.Task.StateWinRT.ApplicationDataContainerServer_GetContainersStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerServer_GetContainers
Opcode
Stop

Event ID 260: AppModel.Task.StateWinRT.ApplicationDataContainerServer_CreateContainerStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerServer_CreateContainer
Opcode
Start

Event ID 261: AppModel.Task.StateWinRT.ApplicationDataContainerServer_CreateContainerStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerServer_CreateContainer
Opcode
Stop

Event ID 270: AppModel.Task.StateWinRT.ApplicationDataContainerServer_DeleteContainerStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerServer_DeleteContainer
Opcode
Start

Event ID 271: AppModel.Task.StateWinRT.ApplicationDataContainerServer_DeleteContainerStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerServer_DeleteContainer
Opcode
Stop

Event ID 280: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_LifespanStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_Lifespan
Opcode
Start

Event ID 281: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_LifespanStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_Lifespan
Opcode
Stop

Event ID 290: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_LookupStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_Lookup
Opcode
Start

Event ID 291: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_LookupStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_Lookup
Opcode
Stop

Event ID 300: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_SizeStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_Size
Opcode
Start

Event ID 301: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_SizeStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_Size
Opcode
Stop

Event ID 310: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_HasKeyStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_HasKey
Opcode
Start

Event ID 311: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_HasKeyStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_HasKey
Opcode
Stop

Event ID 320: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_GetViewStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_GetView
Opcode
Start

Event ID 321: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_GetViewStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_GetView
Opcode
Stop

Event ID 330: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_InsertStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_Insert
Opcode
Start

Event ID 331: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_InsertStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_Insert
Opcode
Stop

Event ID 340: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_RemoveStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_Remove
Opcode
Start

Event ID 341: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_RemoveStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_Remove
Opcode
Stop

Event ID 350: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_ClearStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_Clear
Opcode
Start

Event ID 351: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_ClearStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_Clear
Opcode
Stop

Event ID 360: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_FirstStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_First
Opcode
Start

Event ID 361: AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_FirstStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataContainerSettingsServer_First
Opcode
Stop

Event ID 370: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_LifespanStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_Lifespan
Opcode
Start

Event ID 371: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_LifespanStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_Lifespan
Opcode
Stop

Event ID 380: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_LookupStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_Lookup
Opcode
Start

Event ID 381: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_LookupStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_Lookup
Opcode
Stop

Event ID 390: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_SizeStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_Size
Opcode
Start

Event ID 391: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_SizeStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_Size
Opcode
Stop

Event ID 400: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_HasKeyStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_HasKey
Opcode
Start

Event ID 401: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_HasKeyStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_HasKey
Opcode
Stop

Event ID 410: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_GetViewStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_GetView
Opcode
Start

Event ID 411: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_GetViewStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_GetView
Opcode
Stop

Event ID 420: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_InsertStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_Insert
Opcode
Start

Event ID 421: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_InsertStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_Insert
Opcode
Stop

Event ID 430: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_RemoveStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_Remove
Opcode
Start

Event ID 431: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_RemoveStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_Remove
Opcode
Stop

Event ID 440: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_ClearStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_Clear
Opcode
Start

Event ID 441: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_ClearStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_Clear
Opcode
Stop

Event ID 450: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_FirstStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_First
Opcode
Start

Event ID 451: AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_FirstStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataCompositeValueServer_First
Opcode
Stop

Event ID 460: AppModel.Task.StateWinRT.RoamingRpcSignalStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.RoamingRpcSignal
Opcode
Start

Event ID 461: AppModel.Task.StateWinRT.RoamingRpcSignalStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.RoamingRpcSignal
Opcode
Stop

Event ID 470: AppModel.Task.StateWinRT.DataChangedEventDispatchStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.DataChangedEventDispatch
Opcode
Start

Event ID 471: AppModel.Task.StateWinRT.DataChangedEventDispatchStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.DataChangedEventDispatch
Opcode
Stop

Event ID 480: AppModel.Task.StateWinRT.TempCleanupStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.TempCleanup
Opcode
Start

Event ID 481: AppModel.Task.StateWinRT.TempCleanupStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.TempCleanup
Opcode
Stop

Event ID 490: AppModel.Task.StateWinRT.ApplicationDataServer_ForUserStart

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_ForUser
Opcode
Start

Event ID 491: AppModel.Task.StateWinRT.ApplicationDataServer_ForUserStop

#
Channel
Diagnostic
Task
AppModel.Task.StateWinRT.ApplicationDataServer_ForUser
Opcode
Stop

Provenance

ETW provider GUID bff15e13-81bf-45ee-8b16-7cfead00da86

Defined in Microsoft-Windows-System-Events.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.3932, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB