Microsoft-Windows-Shell-AppWizCpl

Event	Title	Channel	Sample	Rule
1	AppWizCpl_SoftwareExplorer_InstalledProgramsChangeNotify	Diagnostic	N	N
2	AppWizCpl_SoftwareExplorer_RemoveApplicationLaunchStart	Diagnostic	N	N
3	AppWizCpl_SoftwareExplorer_RemoveApplicationLaunchStop	Diagnostic	N	N
4	AppWizCpl_SoftwareExplorer_OpenStart	Diagnostic	N	N
5	AppWizCpl_SoftwareExplorer_OpenStop	Diagnostic	N	N
6	AppWizCpl_SoftwareExplorer_InstalledProgramsViewStart	Diagnostic	N	N
7	AppWizCpl_SoftwareExplorer_InstalledProgramsViewStop	Diagnostic	N	N
8	AppWizCpl_SoftwareExplorer_NewProgramsViewStart	Diagnostic	N	N
9	AppWizCpl_SoftwareExplorer_NewProgramsViewStop	Diagnostic	N	N
10	AppWizCpl_SoftwareExplorer_InstallApplicationLaunchStart	Diagnostic	N	N
11	AppWizCpl_SoftwareExplorer_InstallApplicationLaunchStop	Diagnostic	N	N

Event ID 1: AppWizCpl_SoftwareExplorer_InstalledProgramsChangeNotify

Channel: Diagnostic
Task: AppWizCpl_SoftwareExplorer_InstalledProgramsChangeNotify

Event ID 2: AppWizCpl_SoftwareExplorer_RemoveApplicationLaunchStart

Channel: Diagnostic
Task: AppWizCpl_SoftwareExplorer_RemoveApplicationLaunch
Opcode: Start

Event ID 3: AppWizCpl_SoftwareExplorer_RemoveApplicationLaunchStop

Channel: Diagnostic
Task: AppWizCpl_SoftwareExplorer_RemoveApplicationLaunch
Opcode: Stop

Event ID 4: AppWizCpl_SoftwareExplorer_OpenStart

Channel: Diagnostic
Task: AppWizCpl_SoftwareExplorer_Open
Opcode: Start

Event ID 5: AppWizCpl_SoftwareExplorer_OpenStop

Channel: Diagnostic
Task: AppWizCpl_SoftwareExplorer_Open
Opcode: Stop

Event ID 6: AppWizCpl_SoftwareExplorer_InstalledProgramsViewStart

Channel: Diagnostic
Task: AppWizCpl_SoftwareExplorer_InstalledProgramsView
Opcode: Start

Event ID 7: AppWizCpl_SoftwareExplorer_InstalledProgramsViewStop

Channel: Diagnostic
Task: AppWizCpl_SoftwareExplorer_InstalledProgramsView
Opcode: Stop

Event ID 8: AppWizCpl_SoftwareExplorer_NewProgramsViewStart

Channel: Diagnostic
Task: AppWizCpl_SoftwareExplorer_NewProgramsView
Opcode: Start

Event ID 9: AppWizCpl_SoftwareExplorer_NewProgramsViewStop

Channel: Diagnostic
Task: AppWizCpl_SoftwareExplorer_NewProgramsView
Opcode: Stop

Event ID 10: AppWizCpl_SoftwareExplorer_InstallApplicationLaunchStart

Channel: Diagnostic
Task: AppWizCpl_SoftwareExplorer_InstallApplicationLaunch
Opcode: Start

Event ID 11: AppWizCpl_SoftwareExplorer_InstallApplicationLaunchStop

Channel: Diagnostic
Task: AppWizCpl_SoftwareExplorer_InstallApplicationLaunch
Opcode: Stop

Provenance

ETW provider GUID 08d945eb-c8bd-44aa-994f-86079d8dce35

Defined in appwiz.cpl, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.3207, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.3624, captured 2026-06-02 — Manifest XML pack, 2.0 MB