Microsoft-Windows-UxInit
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | CVSCache_Initializing | Diagnostic | N | N |
| 2 | LoadFromCacheStart | Diagnostic | N | N |
| 3 | LoadFromCacheStop | Diagnostic | N | N |
| 4 | WriteToCacheStart | Diagnostic | N | N |
| 5 | WriteToCacheStop | Diagnostic | N | N |
| 6 | InitializeUserThemeStart | Diagnostic | N | N |
| 7 | InitializeUserThemeStart7 | Diagnostic | N | N |
| 8 | ReuseExistingThemeData | Diagnostic | N | N |
| 9 | ApplyNewThemeData | Diagnostic | N | N |
| 10 | LoadThemeAsSystem | Diagnostic | N | N |
| 11 | ThemeServiceStart | Diagnostic | N | N |
Event ID 2: LoadFromCacheStart
#Event ID 4: WriteToCacheStart
#Event ID 6: InitializeUserThemeStart
#Fields #
| Name | Description |
|---|---|
monitorConfig Int32 | |
fPolicyCheckOnly Boolean |
Event ID 7: InitializeUserThemeStart7
#Fields #
| Name | Description |
|---|---|
monitorConfig Int32 | |
fPolicyCheckOnly Boolean |
Event ID 8: ReuseExistingThemeData
#Fields #
| Name | Description |
|---|---|
monitorConfig Int32 | |
systemDpi Int32 | |
IsHighContrastMode Boolean | |
hr Int32 |
Event ID 9: ApplyNewThemeData
#Fields #
| Name | Description |
|---|---|
monitorConfig Int32 | |
systemDpi Int32 | |
IsHighContrastMode Boolean | |
hr Int32 |
Event ID 10: LoadThemeAsSystem
#Fields #
| Name | Description |
|---|---|
monitorConfig Int32 | |
systemDpi Int32 | |
IsHighContrastMode Boolean | |
hr Int32 |
Event ID 11: ThemeServiceStart
#Provenance
ETW provider GUID 4154a29c-40d9-445f-8d65-24da473e8f65
Defined in shsvcs.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB