Microsoft-Windows-UserSettingsBackup-EarlyDownloader
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | Error ErrorCode occurred. | Operational | N | N |
| 2 | An operation did not complete as expected. | Operational | N | N |
| 3 | See event details for more information. | Operational | N | N |
| 4 | Preparations to download units failed. | Operational | N | N |
| 5 | A download operation was canceled. | Operational | N | N |
| 6 | A download all operation completed. | Operational | N | N |
| 7 | A download operation has started. | Operational | N | N |
| 8 | A download asset operation has started. | Operational | N | N |
| 15 | A download operation has failed. | Operational | N | N |
| 105 | A download file has been saved. | Operational | N | N |
| 107 | A download asset file has been saved. | Operational | N | N |
| 109 | A process response operation failed. | Operational | N | N |
| 111 | A profile data web request failed. | Operational | N | N |
Event ID 1: Error ErrorCode occurred.
#Event ID 2: An operation did not complete as expected.
#Event ID 3: See event details for more information.
#Fields #
| Name | Description |
|---|---|
Message UnicodeString | |
File AnsiString | |
LineNumber UInt32 |
Event ID 4: Preparations to download units failed.
#Event ID 5: A download operation was canceled.
#Event ID 6: A download all operation completed.
#Event ID 7: A download operation has started.
#Event ID 8: A download asset operation has started.
#Event ID 15: A download operation has failed.
#Event ID 105: A download file has been saved.
#Event ID 107: A download asset file has been saved.
#Event ID 109: A process response operation failed.
#Event ID 111: A profile data web request failed.
#Provenance
ETW provider GUID c675305e-51bd-5da6-08b4-d4cb88d198f0
Defined in Windows.CloudStore.EarlyDownloader.dll, which carries the event manifest.
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1301, captured 2026-06-02 — Manifest XML pack, 2.0 MB