detection.wiki

Microsoft-Windows-FunctionDiscoveryHost

EventTitleChannelSampleRule
1000Registration of the provider String failed with the following error: HRESULT.SystemNN

Event ID 1000: Registration of the provider String failed with the following error: HRESULT.

#
Channel
System
Opcode
Info

Message #

Registration of the provider %1 failed with the following error: %2.

Fields #

NameDescription
String UnicodeString
HRESULT UInt32
Line UInt32
Filename AnsiString

Provenance

ETW provider GUID 538cbbad-4877-4eb2-b26e-7caee8f0f8cb

Defined in fdphost.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB