Microsoft-Windows-Shell-DefaultPrograms
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | CPL_DefaultPrograms_Hub_SetYourDefaultProgramsClicks | Diagnostic | N | N |
| 2 | CPL_DefaultPrograms_Hub_FileAssociationClicks | Diagnostic | N | N |
| 3 | CPL_DefaultPrograms_Hub_AutoplayClicks | Diagnostic | N | N |
| 4 | CPL_DefaultPrograms_Hub_SpadClicks | Diagnostic | N | N |
| 5 | CPL_DefaultPrograms_ProgramsPage_SetAsDefaultClicks | Diagnostic | N | N |
| 6 | CPL_DefaultPrograms_ProgramsPage_ChooseDefaultsClicks | Diagnostic | N | N |
| 7 | CPL_DefaultPrograms_Advanced_SaveClicks | Diagnostic | N | N |
| 8 | CPL_DefaultPrograms_Advanced_3rdPartyInvocations | Diagnostic | N | N |
Event ID 1: CPL_DefaultPrograms_Hub_SetYourDefaultProgramsClicks
#Fields #
| Name | Description |
|---|---|
SqmSessionGuid GUID | |
SqmID UInt32 | |
SqmType UInt32 | |
SqmDWORDDatapointValue UInt32 |
Event ID 2: CPL_DefaultPrograms_Hub_FileAssociationClicks
#Fields #
| Name | Description |
|---|---|
SqmSessionGuid GUID | |
SqmID UInt32 | |
SqmType UInt32 | |
SqmDWORDDatapointValue UInt32 |
Event ID 3: CPL_DefaultPrograms_Hub_AutoplayClicks
#Fields #
| Name | Description |
|---|---|
SqmSessionGuid GUID | |
SqmID UInt32 | |
SqmType UInt32 | |
SqmDWORDDatapointValue UInt32 |
Event ID 4: CPL_DefaultPrograms_Hub_SpadClicks
#Fields #
| Name | Description |
|---|---|
SqmSessionGuid GUID | |
SqmID UInt32 | |
SqmType UInt32 | |
SqmDWORDDatapointValue UInt32 |
Event ID 5: CPL_DefaultPrograms_ProgramsPage_SetAsDefaultClicks
#Fields #
| Name | Description |
|---|---|
SqmSessionGuid GUID | |
SqmID UInt32 | |
SqmType UInt32 | |
SqmDWORDDatapointValue UInt32 |
Event ID 6: CPL_DefaultPrograms_ProgramsPage_ChooseDefaultsClicks
#Fields #
| Name | Description |
|---|---|
SqmSessionGuid GUID | |
SqmID UInt32 | |
SqmType UInt32 | |
SqmDWORDDatapointValue UInt32 |
Provenance
ETW provider GUID 65d99466-7a8e-489c-b8e1-962bc945031e
Defined in sud.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB