Microsoft-Windows-ThemeUI
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 0 | ThemeLoaded | Diagnostic | N | N |
| 1 | ThemeLoadFailed | Diagnostic | N | N |
| 2 | ThemeDisabled | Diagnostic | N | N |
| 3 | ThemeSelected | Diagnostic | N | N |
| 4 | ApplyThemeStart | Diagnostic | N | N |
| 5 | ApplyThemeStop | Diagnostic | N | N |
| 6 | ThemePack_FilePacked | Diagnostic | N | N |
| 7 | ThemePack_FileUnpacked | Diagnostic | N | N |
| 8 | ThemePack_ProgressBarDisplayed | Diagnostic | N | N |
| 9 | PlayThemeApplySound | Diagnostic | N | N |
| 10 | ThemePreviewStart | Diagnostic | N | N |
| 11 | ThemePreviewStop | Diagnostic | N | N |
| 12 | ThemePreview | Diagnostic | N | N |
| 13 | ThemePreview13 | Diagnostic | N | N |
| 14 | ThemePreview14 | Diagnostic | N | N |
| 15 | ScreenSaver_DialogInitStart | Diagnostic | N | N |
| 16 | ScreenSaver_DialogInitStop | Diagnostic | N | N |
| 17 | DimmedWindowStart | Diagnostic | N | N |
| 18 | DimmedWindowStop | Diagnostic | N | N |
Event ID 4: ApplyThemeStart
#Event ID 5: ApplyThemeStop
#Event ID 8: ThemePack_ProgressBarDisplayed
#Event ID 10: ThemePreviewStart
#Event ID 11: ThemePreviewStop
#Event ID 12: ThemePreview
#Event ID 15: ScreenSaver_DialogInitStart
#Event ID 16: ScreenSaver_DialogInitStop
#Event ID 17: DimmedWindowStart
#Event ID 18: DimmedWindowStop
#Provenance
ETW provider GUID 869fb599-80aa-485d-bca7-db18d72b7219
Defined in themeui.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB