Microsoft-Windows-AppxPackagingOM
327 events across 3 channels
Event ID 100 — error %1: App manifest validation error: The app manifest must be valid as per schema: Line %2, Column %3, Reason: %4.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
reason | — |
Event ID 101 — error %1: App manifest validation error: The document root element %2 must be defined in the %3 namespace.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
name | — |
xmlNamespace | — |
Event ID 102 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Match attribute value must not use wildcards in the domain name segment if...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 103 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Match attribute value must not use wildcards in the host name segment if a...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 104 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Match attribute value must not specify values "*" or "*.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 105 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Match attribute value must be a valid absolute URI as per the CreateUri API.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 106 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Match attribute value must be a valid absolute or relative URI as per the ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 107 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Application element must specify the Executable or StartPage attribute.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 110 — error %1: App manifest validation error: Line %2, Column %3, Reason: The DefaultTile element must specify the Wide310x150Logo attribute if the Squa...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 111 — error %1: App manifest validation error: Line %2, Column %3, Reason: The logo %4 must be specified if the %5 value is set to "%6".
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
logo | — |
field | — |
value | — |
Event ID 112 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Extension element must specify the Executable attribute with the EntryPoin...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 113 — error %1: App manifest validation error: Line %2, Column %3, Reason: The UriTemplate field must specify an absolute URI with the scheme HTTP or HTTPS.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 114 — error %1: App manifest validation error: Line %2, Column %3, Reason: The max version tested value must not be less than the min version value.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 115 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Match attribute value must only specify the "https" scheme if it's an abso...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 116 — error %1: App manifest validation error: Line %2, Column %3, Reason: The manifest must specify at least one Resource element with a Language attrib...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 117 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Language attribute value "%4" must comply with BCP 47 specification.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
elementName | — |
Event ID 118 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Extension element with the Category attribute value "%4" must specify a ch...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
elementName | — |
Event ID 119 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Extension element with the Category attribute value "%4" must not specify ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
elementName | — |
Event ID 120 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Extension element with the Category attribute value "%4" must specify the ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
elementName | — |
Event ID 121 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Extension element with Category attribute value "%4" must only be declared...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
elementName | — |
Event ID 122 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Extension element with Category attribute value "windows.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 123 — error %1: App manifest validation error: The app manifest XML must be valid: Line %2, Column %3, Reason: %4.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
reason | — |
Event ID 124 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Identity/@Name attribute value "%4" must not contain a reserved name.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 126 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Application/@Id attribute value "%4" must not contain the reserved name "%5".
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
fullValue | — |
fieldValue | — |
Event ID 127 — error %1: App manifest validation error: Line %2, Column %3, Reason: The field "%4" with value "%5" must only be declared once.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
fieldName | — |
fieldValue | — |
duplicateLineNumber | — |
duplicateColumnNumber | — |
Event ID 128 — error %1: App manifest validation error: The app manifest schema must be valid: Reason: %2.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
reason | — |
Event ID 129 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Publisher attribute value "%4" must be valid as per publisher naming rules.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 130 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Extension element with the Category attribute value "%4" must specify the ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 131 — error %1: App manifest validation error: Line %2, Column %3, Reason: The DefaultTile element must specify the WideLogo or Wide310x150Logo attribute...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 132 — error %1: App manifest validation error: The app manifest XML encoding must be UTF-8 or UTF-16.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 133 — error %1: App manifest validation error: Line %2, Column %3, Reason: The attribute %4 must be specified if the attribute %5 on the %6 element is sp...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
attributeName1 | — |
attributeName2 | — |
elementName | — |
Event ID 134 — error %1: App manifest validation error: Line %2, Column %3, Reason: The attribute %4 must not be specified if the attribute %5 on the %6 element i...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
attributeName1 | — |
attributeName2 | — |
elementName | — |
Event ID 135 — error %1: App manifest validation error: The app manifest must be valid as per schema: Line %2, Column %3, Note: The schema for MaxVersionTested sp...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
xmlNamespace | — |
reason | — |
Event ID 139 — error %1: App manifest validation error: Line %2, Column %3, Reason: The field %4 must not be specified if the ResourcePackage element value "true"...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
elementName | — |
Event ID 140 — error %1: App manifest validation error: Line %2, Column %3, Reason: Only one type of resource qualifier can be specified for a resource package.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
attributeName1 | — |
attributeName2 | — |
elementName | — |
Event ID 141 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Framework and ResourcePackage element values must not be specified to "tru...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 142 — error %1: App manifest validation error: Line %2, Column %3, Reason: The element %4 must specify at least one attribute.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
elementName | — |
Event ID 143 — error %1: App manifest validation error: Line %2, Column %3, Reason: The LaunchAction element must specify the Executable attribute with the EntryP...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 144 — error %1: App manifest validation error: Line %2, Column %3, Reason: The ServiceId element must specify the Executable attribute with the EntryPoin...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 145 — error %1: App manifest validation error: Line %2, Column %3, Reason: The LaunchAction element under ContactLaunchActions must not specify ServiceId...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 146 — error %1: App manifest validation error: Line %2, Column %3, Reason: The LaunchAction element under ContactLaunchActions must specify at least one ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 147 — error %1: App manifest validation error: Line %2, Column %3, Reason: The LaunchAction element under ContactLaunchActions must only specify the Serv...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 150 — error %1: The app manifest publisher name (%3) must match the subject name of the signing certificate (%2).
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
expectedValue | — |
actualValue | — |
Event ID 151 — error %1: The signature hash method specified (%3) must match the hash method used in the app package block map (%2).
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
expectedValue | — |
actualValue | — |
Event ID 152 — error %1: The app package contents must validate against its block map.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 153 — error %1: The signature in the app package or bundle must be trusted.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 154 — error %1: The root certificate of the signature in the app package or bundle must be trusted.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 155 — error %1: The root certificate and all intermediate certificates of the signature in the app package or bundle must be trusted.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 156 — error %1: The app package must be digitally signed for signature validation.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 157 — The app package signature was validated for core content of the app package published by %1.
Message
Fields
| Name | Description |
|---|---|
subjectName | — |
Example Event
system:
provider: Microsoft-Windows-AppxPackagingOM
guid: BA723D81-0D0C-4F1E-80C8-54740F508DDF
event_source_name: ''
event_id: 157
version: 0
level: 4
task: 7
opcode: 12
keywords: 9223372036854775808
time_created: '2023-11-06T01:42:48.381218+00:00'
event_record_id: 1772
correlation:
ActivityID: E4DB489E-1037-0001-CE30-F2E43710DA01
execution:
process_id: 17796
thread_id: 7604
channel: Microsoft-Windows-AppxPackaging/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
subjectName: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington,
C=US
message: ''
Sigma Rules
- Suspicious Digital Signature Of AppX Package
Detects execution of AppX packages with known suspicious or malicious signature
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 158 — error %1: App manifest validation error: Line %2, Column %3, Reason: The element %4 must not be specified if the Framework element value "true" is ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
elementName | — |
Event ID 159 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Match attribute value must specify a host name segment if the Type attribu...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 160 — error %1: The app bundle manifest publisher name (%3) must match the subject name of the signing certificate (%2).
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
expectedValue | — |
actualValue | — |
Event ID 161 — error %1: The signature hash method specified (%3) must match the hash method used in the app bundle block map (%2).
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
expectedValue | — |
actualValue | — |
Event ID 162 — error %1: An app package (%2) in the bundle could not be signed.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
packageName | — |
Event ID 163 — error %1: The app bundle must be digitally signed for signature validation.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 164 — The app bundle signature was validated for core content of the app bundle published by %1.
Message
Fields
| Name | Description |
|---|---|
subjectName | — |
Example Event
system:
provider: Microsoft-Windows-AppxPackagingOM
guid: BA723D81-0D0C-4F1E-80C8-54740F508DDF
event_source_name: ''
event_id: 164
version: 0
level: 4
task: 7
opcode: 12
keywords: 9223372036854775808
time_created: '2023-11-06T01:29:24.843342+00:00'
event_record_id: 1759
correlation:
ActivityID: E4DB489E-1037-0000-8EA5-E7E43710DA01
execution:
process_id: 17796
thread_id: 11380
channel: Microsoft-Windows-AppxPackaging/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
subjectName: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington,
C=US
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 165 — error %1: An encrypted app package (ID = %2) in the bundle could not be signed.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
fileId | — |
Event ID 170 — The streaming reader was created successfully for app package %1.
Message
Fields
| Name | Description |
|---|---|
packageFullName | — |
Example Event
system:
provider: Microsoft-Windows-AppxPackagingOM
guid: BA723D81-0D0C-4F1E-80C8-54740F508DDF
event_source_name: ''
event_id: 170
version: 0
level: 4
task: 3
opcode: 0
keywords: 9223372036854775808
time_created: '2023-11-06T01:42:50.720216+00:00'
event_record_id: 1774
correlation:
ActivityID: E4DB489E-1037-0001-CE30-F2E43710DA01
execution:
process_id: 17796
thread_id: 7604
channel: Microsoft-Windows-AppxPackaging/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
packageFullName: MicrosoftTeams_23275.702.2421.2406_x64__8wekyb3d8bbwe
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 171 — The reader was created successfully for app package %1.
Message
Fields
| Name | Description |
|---|---|
packageFullName | — |
Example Event
system:
provider: Microsoft-Windows-AppxPackagingOM
guid: BA723D81-0D0C-4F1E-80C8-54740F508DDF
event_source_name: ''
event_id: 171
version: 0
level: 4
task: 2
opcode: 0
keywords: 9223372036854775808
time_created: '2023-11-06T01:19:35.789343+00:00'
event_record_id: 1752
correlation: {}
execution:
process_id: 2352
thread_id: 11172
channel: Microsoft-Windows-AppxPackaging/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data:
packageFullName: Microsoft.Winget.Source_2023.1105.1744.368_neutral__8wekyb3d8bbwe
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 172 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because it's a framework package.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
fileName | — |
packageFullName | — |
Event ID 173 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because the bundle also contains the package with f...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
currentFileName | — |
currentPackageFullName | — |
conflictingFileName | — |
conflictingPackageFullName | — |
Event ID 174 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because the bundle also contains the package with f...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
currentFileName | — |
currentPackageFullName | — |
conflictingFileName | — |
conflictingPackageFullName | — |
Event ID 175 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because it uses a different hash algorithm than oth...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
fileName | — |
packageFullName | — |
expectedValue | — |
Event ID 176 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because it has a different package family name than...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
fileName | — |
packageFullName | — |
expectedValue | — |
Event ID 177 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because it has a different package family name than...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
fileName | — |
packageFullName | — |
expectedValue | — |
Event ID 178 — error %1: The bundle must contain at least one app package targeting a known processor architecture.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 179 — error %1: The bundle can't contain more than 10000 packages.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 180 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Extension element with the Category attribute value "%4" must not specify ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
extensionCategoryName | — |
attributeName | — |
Event ID 181 — The reader was created successfully without manifest validation.
Message
Example Event
system:
provider: Microsoft-Windows-AppxPackagingOM
guid: BA723D81-0D0C-4F1E-80C8-54740F508DDF
event_source_name: ''
event_id: 181
version: 0
level: 4
task: 2
opcode: 0
keywords: 9223372036854775808
time_created: '2023-11-06T01:19:36.005708+00:00'
event_record_id: 1756
correlation: {}
execution:
process_id: 2352
thread_id: 11172
channel: Microsoft-Windows-AppxPackaging/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-21-1992711665-1655669231-58201500-1000
event_data: {}
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 182 — error %1: App manifest validation error: Line %2, Column %3, Reason: The StartPage attribute must be a valid URI.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 183 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Executable attribute for the windows.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 184 — error %1: The chaining mode string for encryption algorithm cannot be empty.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 185 — error %1: App manifest validation error: Line %2, Column %3, Reason: The WindowsRuntimeAccess attribute must not be specified if the Type attribute...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 186 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Match attribute value must only specify the "http", "https" or "ms-appx-we...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 187 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Match attribute value must only specify the "http" or "https" scheme if it...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 188 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Url specified is a duplicate of the base Url specified for the windows.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 189 — error %1: App manifest validation error: Line %2, Column %3, Reason: Windows.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 190 — error %1: App manifest validation error: Line %2, Column %3, Reason: Windows.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 191 — error %1: App manifest validation error: Line %2, Column %3, Reason: The element or attribute or attribute value specified requires "%4" capability.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 192 — error %1: App manifest validation error: Line %2, Column %3, Reason: MainPackageDependency can't be specified when the %4 element is specified.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 193 — error %1: App manifest validation error: Line %2, Column %3, Reason: A package containing MainPackageDependency can't target version %5 of device f...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
targetDeviceFamily | — |
version | — |
Event ID 195 — error %1: App manifest validation error: Line %2, Column %3, Reason: The use of startuptask extension requires the containing Application use the W...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 196 — error %1: App manifest validation error: Line %2, Column %3, Reason: The parameter attribute can only be used in filetype association element if in...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 197 — error %1: App manifest validation error: Line %2, Column %3, Reason: The parameter attribute can only be used in prototype element if in a full tru...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 198 — error %1: App manifest validation error: Line %2, Column %3, Reason: The MultiSelectModel attribute can only be used in filetype association elemen...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 199 — error %1: App manifest validation error: Line %2, Column %3, Reason: The MultiSelectModel attribute can only be used in verb element if in a full t...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 200 — error %1: App manifest validation error: Line %2, Column %3, Reason: AppExecutionAlias can only be used by Centennial Applications.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 201 — error %1: App manifest validation error: Line %2, Column %3, Reason: A package containing MainPackageDependency can't use the "%4" extension.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 202 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Prog Id refrenced by the Class element must have for its CLSID the Class e...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 203 — error %1: App manifest validation error: Line %2, Column %3, Reason: The VersionIndependentProgId refrenced by the Class element must eventualy res...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 204 — error %1: App manifest validation error: Line %2, Column %3, Reason: Prog Id element can not have its own Id for CurrentVersion.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 205 — error %1: App manifest validation error: Line %2, Column %3, Reason: AutoConvertTo attribute of Class can not refer to its own id.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 206 — error %1: App manifest validation error: Line %2, Column %3, Reason: If InsertableObject is present then ProgId attribute must also be.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 207 — error %1: App manifest validation error: Line %2, Column %3, Reason: The dataFormats element can not have both DefaultFormatName and DefaultStandar...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 208 — error %1: App manifest validation error: Line %2, Column %3, Reason: The TypeLib element must have either a Win32Path or a Win64Path child element.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 209 — error %1: App manifest validation error: Line %2, Column %3, Reason: The dataFormat element can not have both FormatName and StandardFormat attribu...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 210 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Conversion element must have a Readable or ReadWritable child.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 211 — error %1: App manifest validation error: Line %2, Column %3, Reason: If useUniversalMarshaler is true the following attributes should not also exis...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 212 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Interface child element typeLib's ID does not match a typeLib ID which als...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 213 — error %1: App manifest validation error: Line %2, Column %3, Reason: Both AsynchronousInterface and SynchronousInterface can't exist in the same In...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 214 — error %1: App manifest validation error: Line %2, Column %3, Reason: The AsynchronousInterface value should match the ID of an Interface with a Syn...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 215 — error %1: App manifest validation error: Line %2, Column %3, Reason: The SynchronousInterface value should match the ID of an Interface with a Asyn...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 216 — App manifest validation warning: Declared namespace %1 is inapplicable, it will be ignored during manifest processing.
Message
Fields
| Name | Description |
|---|---|
namespace | — |
Example Event
system:
provider: Microsoft-Windows-AppxPackagingOM
guid: BA723D81-0D0C-4F1E-80C8-54740F508DDF
event_source_name: ''
event_id: 216
version: 0
level: 3
task: 4
opcode: 11
keywords: 9223372036854775808
time_created: '2023-11-06T06:23:20.661860+00:00'
event_record_id: 426
correlation: {}
execution:
process_id: 1532
thread_id: 1084
channel: Microsoft-Windows-AppxPackaging/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
namespace: http://schemas.microsoft.com/developer/appx/2015/build
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 217 — error %1: App manifest validation error: Line %2, Column %3, Reason: ShellNewFileName attribute must be specified if ShellNewDisplayName attribute ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 218 — error %1: App manifest validation error: Line %2, Column %3, Reason: DdeExecCommand attribute must be specified if DdeExecApplication, DdeExecTopic...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 219 — error %1: App manifest validation error: Line %2, Column %3, Reason: The element or attribute "%4" can't be declared outside of Full Trust EntryPoi...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 220 — error %1: App manifest validation error: Line %2, Column %3, Reason: The "%4" Extension can't be declared outside of Full Trust EntryPoint.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 221 — error %1: App manifest validation error: Line %2, Column %3, Reason: SystemSurrogate attribute and CustomSurrogateExecutable attribute are mutual e...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 222 — error %1: App manifest validation error: Line %2, Column %3, Reason: MainPackageDependency with name "%4" and publisher "%5" can't be specified mul...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
mainPackageName | — |
mainPackagePublisher | — |
Event ID 223 — error %1: App manifest validation error: Line %2, Column %3, Reason: One and only one of AumId and ShortcutPath attribute should be declared.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 224 — error %1: App manifest validation error: Line %2, Column %3, Reason: Either AppServiceName attribute or ActivatableClassId, Path attributes should ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 225 — error %1: App manifest validation error: Line %2, Column %3, Reason: The ComServer SurrogateServer referenced by DesktopPropertyHandler must not de...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 226 — error %1: App manifest validation error: Line %2, Column %3, Reason: PortMin and PortMax attributes should either be both present or not.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 227 — error %1: App manifest validation error: Line %2, Column %3, Reason: To support AppService multiple instances, the extension EntryPoint attribute m...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 228 — error %1: App manifest validation error: Line %2, Column %3, Reason: To support BackgroundTasks multiple instances, the extension Executable attrib...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 229 — error %1: App content group map validation error: Line %2, Column %3, Reason: %4.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
reason | — |
Event ID 230 — error %1: App manifest validation error: Line %2, Column %3, Reason: SearchFilterHandler extension must declare Path and ProcessorArchitecture on b...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 231 — error %1: App manifest validation error: Line %2, Column %3, Reason: The ComInterface ProxyStub element must have either Path attribute or ProxyStu...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 232 — App manifest validation warning: Line %1, Column %2, Reason: The "%3" element is ignored during manifest processing because it's missing required c...
Message
Fields
| Name | Description |
|---|---|
lineNumber | — |
columnNumber | — |
ignoredElement | — |
xpathToRequiredChildElement | — |
Event ID 233 — error %1: App manifest validation error: Line %2, Column %3, Reason: The "%4" extension should be declared under %5 extensions.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
extensionCategoryName | — |
attributeName | — |
Event ID 234 — error %1: App manifest validation error: Line %2, Column %3, Reason: The ExeServer Conversion Format cannot declare both FormatName and StandardFor...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 235 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because its architecture is unknown.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
fileName | — |
packageFullName | — |
Event ID 236 — error %1: App manifest validation error: Line %2, Column %3, Reason: The package extension OutOfProcessServer must declare IdentityType as activate...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 237 — error %1: The XML in the .
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
reason | — |
Event ID 238 — error %1: The namespace "%2" of the root AppInstaller element in the .
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
reason | — |
Event ID 239 — error %1: The XML in the .
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 240 — error %1: App manifest validation error: Line %2, Column %3, Reason: The Content element cannot declare both Parameters attribute and DropTargetHan...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 241 — error %1: App manifest validation error: Line %2, Column %3, Reason: The binary file value "%4" must use lower case extension (exe or dll) on build...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 242 — error %1: App manifest validation error: Line %2, Column %3, Reason: If it is not an audio background task, it is not allowed to have EntryPoint="%...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 243 — error %1: App manifest validation error: Line %2, Column %3, Reason: The %4 element cannot declare the attribute Subsystem with value console witho...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
extensionCategoryName | — |
attributeName | — |
Event ID 244 — error %1: App manifest validation error: Line %2, Column %3, Reason: To support Application multiple instances, the ResourceGroup attribute must no...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 245 — error %1: App manifest validation error: Line %2, Column %3, Reason: A <Resource> element is required for packages targeting OS version 10.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 246 — error %1: App manifest validation error: Line %2, Column %3, Reason: The <AllowExecution> property cannot be set to false for packages targeting OS...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 247 — error %1: The XML in the packaging layout file is not valid: Line %2, Column %3, Reason: %4.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
reason | — |
Event ID 248 — error %1: The namespace "%2" of the root <PackagingLayout> element in the packaging layout file is not recognized.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
reason | — |
Event ID 249 — error %1: The XML in the packaging layout file doesn't contain a valid root <PackagingLayout> element.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 250 — error %1: App manifest validation error: Line %2, Column %3, Reason: The extension windows.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 251 — error %1: App manifest validation error: Line %2, Column %3, Reason: The element ClassicAppCompatKey must have "Name" or "Name and Value" or "Name,...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 252 — error %1: App manifest validation error: Line %2, Column %3, Reason: The attribute Name in element ClassicAppCompatKey cannot be defined under "\\S...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 253 — error %1: App manifest validation error: Line %2, Column %3, Reason: The combination of atributes "AssemblyName, AssemblyVersion, PublicKey and Mac...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 254 — error %1: App manifest validation error: Line %2, Column %3, Reason: Extension "windows.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 255 — error %1: App manifest validation error: Line %2, Column %3, Reason: The element or attribute "%4" can't be declared outside of Partial Trust or Fu...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 256 — error %1: App manifest validation error: Line %2, Column %3, Reason: "Default" attribute should be specified as true for only one "Verb" in a set o...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 257 — error %1: App manifest validation error: Line %2, Column %3, Reason: The "%4" Extension can't be declared with Partial Trust EntryPoint.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 258 — error %1: App manifest validation error: Line %2, Column %3, Reason: The ProgId value "%4" must have a length equal to or less than 39 on builds ea...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 259 — error %1: App manifest validation error: Line %2, Column %3, Reason: A package containing MainPackageDependency can't use the "%4" property.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 260 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because the bundle also contains the package with f...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
currentFileName | — |
currentPackageFullName | — |
conflictingFileName | — |
conflictingPackageFullName | — |
Event ID 261 — error %1: The bundle contains at least two conflicting app packages.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 262 — error %1: App manifest validation error: Line %2, Column %3, Reason: A package without MainPackageDependency can't use the "ModificationPackage" pr...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 263 — error %1: App manifest validation error: Line %2, Column %3, Reason: The attribute "%4" is required if the TargetDeviceFamily is targeting MinVersi...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
extensionCategoryName | — |
attributeName | — |
Event ID 264 — error %1: App manifest validation error: Line %2, Column %3, Reason: "Default" and "Extended" attributes can't be "True" at the same time.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 265 — error %1: App manifest validation error: Line %2, Column %3, Reason: The element or attribute "%4" value "%5" must have a length equal to or less t...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
attributeName | — |
attributeValue | — |
attributeLength | — |
buildVersion | — |
Event ID 266 — error %1: App manifest validation error: Line %2, Column %3, Reason: The attribute %4 must be "%5" if the attribute %6 on the %7 element is specified.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
attributeName | — |
attributeValue | — |
secondAttributeName | — |
elementName | — |
Event ID 267 — error %1: App manifest validation error: Line %2, Column %3, Reason: The extension windows.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 268 — error %1: App manifest validation error: Line %2, Column %3, Reason: The EntryPoint value "%4" must declare attribute "%5" with value "%6".
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
attributeName1 | — |
attributeName2 | — |
elementName | — |
Event ID 269 — error %1: App manifest validation error: Line %2, Column %3, Reason: RuntimeBehavior value "win32App" must declare TrustLevel with value "mediumIL".
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 270 — error %1: App manifest validation error: Line %2, Column %3, Reason: Application with RuntimeBehavior value "win32App" must not declare EntryPoint.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 271 — error %1: App manifest validation error: Line %2, Column %3, Reason: Extension windows.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 272 — error %1: App manifest validation error: Line %2, Column %3, Reason: "%4" with HostId specified can only declare "%5" attribute.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
extensionCategoryName | — |
attributeName | — |
Event ID 273 — error %1: App manifest validation error: Line %2, Column %3, Reason: ShellNewFileName and ShellNewCommandParameters attributes can't be declared at...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 274 — error %1: App manifest validation error: Line %2, Column %3, Reason: ShellNewFileName or ShellNewCommandParameters attributes must be specified if ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 275 — error %1: App manifest validation error: Line %2, Column %3, Reason: %4 can only be used by Centennial Applications.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 276 — error %1: App manifest validation error: Line %2, Column %3, Reason: ShellNewDisplayName must be declared with ShellNewFile on builds earlier than 10.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 277 — error %1: App manifest validation error: Line %2, Column %3, Reason: It is not allowed to have ServiceName equals "%4" without a matching attribute...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 278 — error %1: App manifest validation error: Line %2, Column %3, Reason: Attribute "%4" is inconsistent in different namespaces under element "%5".
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
extensionCategoryName | — |
attributeName | — |
Event ID 279 — App manifest validation warning: Declared namespace %1 is a preview namespace.
Message
Fields
| Name | Description |
|---|---|
namespace | — |
Event ID 280 — error %1: App manifest validation error: Line %2, Column %3, Reason: SupportedFileTypes must declare at least one FileType from uap namespace on bu...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 281 — error %1: App manifest validation error: Line %2, Column %3, Reason: FileType with value "*" must not declare attributes.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 282 — error %1: App manifest validation error: Line %2, Column %3, Reason: SupportedFileTypes must declare at least one FileType element.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 283 — error %1: Stubs in the bundle must contain at least one app package targeting a known processor architecture.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 284 — error %1: Line %2, Column %3, Reason: The bundle with name "%4" and publisher "%5" cannot appear multiple times.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
mainPackageName | — |
mainPackagePublisher | — |
Event ID 285 — error %1: App manifest validation error: Line %2, Column %3, Reason: Application with RuntimeBehavior value "PackagedClassicApp" must not declare E...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 286 — error %1: App manifest validation error: Line %2, Column %3, Reason: Extension "windows.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 287 — error %1: App manifest validation error: Line %2, Column %3, Reason: Package extension "windows.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 288 — error %1: App manifest validation error: Line %2, Column %3, Reason: Element "%4" must not specify fullpath on "CurrentDirectoryPath" when "HostId"...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 289 — error %1: App manifest validation error: Line %2, Column %3, Reason: Element "%4" must have at least one child element.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 290 — error %1: App manifest validation error: Line %2, Column %3, Reason: Subsystem is inconsistent between Extension and AppService %4:Subsystem.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 291 — error %1: App manifest validation error: Line %2, Column %3, Reason: The element %4 must specify only one attribute.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 292 — error %1: App manifest validation error: Line %2, Column %3, Reason: The package contains an XML prefix that is not defined.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 293 — error %1: App manifest validation error: Line %2, Column %3, Reason: Extension "%4" must declare SupportsMultipleInstances equals true.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 294 — error %1: App manifest validation error: Line %2, Column %3, Reason: Extension "windows.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 295 — error %1: App manifest validation error: Line %2, Column %3, Reason: Attribute "IdentityType" with value "activateAsPackage" on element "outOfProce...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 296 — error %1: App manifest validation error: Line %2, Column %3, Reason: Extension "%4" requires "Scope" equals "%5".
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
extensionCategoryName | — |
attributeName | — |
Event ID 298 — error %1: App manifest validation error: Line %2, Column %3, Reason: Dependencies can't declare element "%4" more than %5.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
extensionCategoryName | — |
attributeName | — |
Event ID 299 — error %1: App manifest validation error: Line %2, Column %3, Reason: If the attribute "Id" is delacred with value "%4" on element "TypeLib" in the ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 300 — Creating IAppxPackageWriter, force Zip32 format = %1, hash method = %2.
Message
Fields
| Name | Description |
|---|---|
zipMode | — |
hashMethod | — |
Event ID 301 — IAppxPackageWriter closed.
Message
Fields
| Name | Description |
|---|---|
fileCount | — |
totalSize | — |
Event ID 302 — Adding payload file, file name = %1, content type = %2, compression = %3.
Message
Fields
| Name | Description |
|---|---|
fileName | — |
contentType | — |
compressionOption | — |
Event ID 303 — Payload file added
Message
Event ID 304 — Adding footprint files and closing IAppxPackageWriter
Message
Event ID 305 — IAppxPackageWriter closed
Message
Event ID 306 — Creating IAppxPackageReader
Message
Event ID 307 — IAppxPackageReader created
Message
Event ID 308 — Caching and validating block hash of payload file, file name = %1, size = %2, compression = %3.
Message
Fields
| Name | Description |
|---|---|
fileName | — |
size | — |
compressionOption | — |
Event ID 309 — Payload file cached and validated
Message
Event ID 310 — Creating IAppxPackageStreamingReader, options = %1.
Message
Fields
| Name | Description |
|---|---|
readerOptions | — |
Event ID 311 — IAppxPackageStreamingReader created
Message
Event ID 312 — Executing %1 range requests in IAppxRequestHandler, priority = %2.
Message
Fields
| Name | Description |
|---|---|
requestCount | — |
priority | — |
Event ID 313 — Range requests completed
Message
Event ID 314 — Creating app manifest reader
Message
Event ID 315 — App manifest reader created
Message
Event ID 316 — Creating blockmap reader
Message
Event ID 317 — Blockmap reader created
Message
Event ID 318 — Decompressing block, compressed size = %1.
Message
Fields
| Name | Description |
|---|---|
value | — |
Event ID 319 — Block decompressed, uncompressed size = %1.
Message
Fields
| Name | Description |
|---|---|
value | — |
Event ID 320 — Downloading package metadata
Message
Event ID 321 — Package metadata downloaded
Message
Event ID 350 — Checking SIP support for file
Message
Event ID 351 — Check for SIP support completed
Message
Event ID 352 — Returning signature or signature size from app package
Message
Event ID 353 — Signature or signature size returned from app package
Message
Event ID 354 — Adding signature to app package
Message
Event ID 355 — Signature added to app package
Message
Event ID 356 — Removing signature from app package
Message
Event ID 357 — Signature removed from app package
Message
Event ID 358 — Creating or sizing indirect data
Message
Event ID 359 — Indirect data created or sized
Message
Event ID 360 — Verifying indirect data
Message
Event ID 361 — Indirect data verified
Message
Event ID 362 — Looking up friendly names for capability with SID %1.
Message
Fields
| Name | Description |
|---|---|
capabilitySid | — |
Event ID 363 — Looking up friendly names for capability with SID %1 finished with result %2.
Message
Fields
| Name | Description |
|---|---|
capabilitySid | — |
result | — |
Event ID 364 — Verifying the file stream against the block map file hash
Message
Event ID 365 — Block map file hash verified against the file stream
Message
Event ID 366 — Creating IAppxBundleWriter
Message
Event ID 367 — IAppxBundleWriter closed
Message
Event ID 368 — Adding payload package
Message
Event ID 369 — Payload package added
Message
Event ID 370 — Adding footprint files and closing IAppxBundleWriter
Message
Event ID 371 — Footprint files added and IAppxBundleWriter closed
Message
Event ID 372 — Checking AppxBundle SIP support for file
Message
Event ID 373 — Check for AppxBundle SIP support completed
Message
Event ID 374 — Returning signature or signature size from app bundle
Message
Event ID 375 — Signature or signature size returned from app bundle
Message
Event ID 376 — Adding signature to app bundle
Message
Event ID 377 — Signature added to app bundle
Message
Event ID 378 — Removing signature from app bundle
Message
Event ID 379 — Signature removed from app bundle
Message
Event ID 380 — Creating or sizing bundle indirect data
Message
Event ID 381 — Bundle indirect data created or sized
Message
Event ID 382 — Verifying bundle indirect data
Message
Event ID 383 — Bundle indirect data verified
Message
Event ID 384 — Creating IAppxBundleReader
Message
Event ID 385 — IAppxBundleReader created
Message
Event ID 388 — Creating bundle manifest reader
Message
Event ID 389 — Bundle manifest reader created
Message
Event ID 390 — The bundle reader was created successfully for bundle %1.
Message
Fields
| Name | Description |
|---|---|
packageFullName | — |
Event ID 391 — The bundle streaming reader was created successfully for bundle %1.
Message
Fields
| Name | Description |
|---|---|
packageFullName | — |
Example Event
system:
provider: Microsoft-Windows-AppxPackagingOM
guid: BA723D81-0D0C-4F1E-80C8-54740F508DDF
event_source_name: ''
event_id: 391
version: 0
level: 4
task: 40
opcode: 0
keywords: 9223372036854775808
time_created: '2023-11-06T01:29:25.365806+00:00'
event_record_id: 1760
correlation:
ActivityID: E4DB489E-1037-0000-8EA5-E7E43710DA01
execution:
process_id: 17796
thread_id: 11380
channel: Microsoft-Windows-AppxPackaging/Operational
computer: WinDev2310Eval
security:
user_id: S-1-5-18
event_data:
packageFullName: Microsoft.PowerShellPreview_2023.1023.2122.0_neutral_~_8wekyb3d8bbwe
message: ''
References
- Example event sourced from https://github.com/NextronSystems/evtx-baseline
Event ID 392 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because the bundle contains another package with th...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
fileName | — |
packageFullName | — |
Event ID 393 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because its package type doesn't match the value fo...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
fileName | — |
packageFullName | — |
Event ID 394 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because its identity doesn't match the value found ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
fileName | — |
packageFullName | — |
expectedValue | — |
Event ID 395 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because its resources don't match the values found ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
fileName | — |
packageFullName | — |
Event ID 396 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because its manifest declares a value for %4 which ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
currentFileName | — |
currentPackageFullName | — |
attributeName | — |
expectedValue | — |
Event ID 397 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because its manifest doesn't declare any Applicatio...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
fileName | — |
packageFullName | — |
Event ID 398 — error %1: All app package manifests in a bundle must declare the same values under the XPath %10.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
currentFileName | — |
currentPackageFullName | — |
currentManifestLineNumber | — |
currentManifestColumnNumber | — |
referenceFileName | — |
referencePackageFullName | — |
referenceManifestLineNumber | — |
referenceManifestColumnNumber | — |
xPathToMismatchLocation | — |
Event ID 399 — The bundle reader was created successfully without manifest validation.
Message
Event ID 400 — Checking Eappx SIP support for file
Message
Event ID 401 — Check for Eappx SIP support completed
Message
Event ID 402 — Returning signature or signature size from encrypted app package
Message
Event ID 403 — Signature or signature size returned from encrypted app package
Message
Event ID 404 — Adding signature to encrypted app package
Message
Event ID 405 — Signature added to encrypted app package
Message
Event ID 406 — Removing signature from encrypted app package
Message
Event ID 407 — Signature removed from encrypted app package
Message
Event ID 408 — Creating or sizing encrypted app indirect data
Message
Event ID 409 — Encrypted app indirect data created or sized
Message
Event ID 410 — Verifying encrypted app indirect data
Message
Event ID 411 — Encrypted app indirect data verified
Message
Event ID 412 — Checking EappxBundle SIP support for file
Message
Event ID 413 — Check for EappxBundle SIP support completed
Message
Event ID 414 — Returning signature or signature size from encrypted app bundle
Message
Event ID 415 — Signature or signature size returned from encrypted app bundle
Message
Event ID 416 — Adding signature to encrypted app bundle
Message
Event ID 417 — Signature added to encrypted app bundle
Message
Event ID 418 — Removing signature from encrypted app bundle
Message
Event ID 419 — Signature removed from encrypted app bundle
Message
Event ID 420 — Creating or sizing encrypted bundle indirect data
Message
Event ID 421 — Encrypted bundle indirect data created or sized
Message
Event ID 422 — Verifying encrypted bundle indirect data
Message
Event ID 423 — Encrypted bundle indirect data verified
Message
Event ID 424 — Adding payload files, file count = %1.
Message
Fields
| Name | Description |
|---|---|
fileCount | — |
Event ID 425 — Payload files added
Message
Event ID 426 — Processing payload file, file name = %1, content type = %2, compression = %3.
Message
Fields
| Name | Description |
|---|---|
fileName | — |
contentType | — |
compressionOption | — |
Event ID 427 — Payload file processed
Message
Event ID 428 — Adding reference package
Message
Event ID 429 — Reference package added
Message
Event ID 430 — error %1: The package with file name "%2" and package full name "%3" is not valid in the bundle because the bundle contains another package with th...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
fileName | — |
packageFullName | — |
Event ID 431 — Adding publisher bridging artifact to package
Message
Event ID 432 — Added publisher bridging artifact to package
Message
Event ID 433 — Adding publisher bridging artifact to bundle
Message
Event ID 434 — Added publisher bridging artifact to bundle
Message
Event ID 435 — Checking SIP support for file
Message
Event ID 436 — Check for SIP support completed
Message
Event ID 437 — Returning signature or signature size from app package
Message
Event ID 438 — Signature or signature size returned from app package
Message
Event ID 439 — Adding signature to app package
Message
Event ID 440 — Signature added to app package
Message
Event ID 441 — Removing signature from app package
Message
Event ID 442 — Signature removed from app package
Message
Event ID 443 — Creating or sizing indirect data
Message
Event ID 444 — Indirect data created or sized
Message
Event ID 445 — Verifying indirect data
Message
Event ID 446 — Indirect data verified
Message
Event ID 1000 — error %1: App manifest validation error: Line %2, Column %3, Reason: Attribute "Id" with value "%4" on elements "Class" and "TreatAsClass" must be ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 1001 — error %1: App manifest validation error: Line %2, Column %3, Reason: Attribute "Id" with value "%4" on element "ProgId" must be unique accross the ...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 1002 — error %1: App manifest validation error: Line %2, Column %3, Reason: Attribute "Id" with value "%4" on element "TypeLib" must be unique accross the...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 1003 — error %1: App manifest validation error: Line %2, Column %3, Reason: Attribute "%4" with value "%5" on element "%6" must be define on attribute "Id...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
attributeName | — |
attributeValue | — |
secondAttributeName | — |
elementName | — |
Event ID 1004 — error %1: App manifest validation error: Line %2, Column %3, Reason: Element "TypeLib" must match attributes "Id" and "VersionNumber" on element "T...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 1005 — error %1: App manifest validation error: Line %2, Column %3, Reason: Attribute "Clsid" with value "%4" must define an Element "Class" on element "S...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 1006 — error %1: The XML in the publisher bridging artifact is not valid: Line %2, Column %3, Reason: %4.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
reason | — |
Event ID 1007 — error %1: The namespace "%2" of the root <Publisher> element in the publisher bridging artifact is not recognized.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
reason | — |
Event ID 1008 — error %1: The XML in the publisher bridging artifact doesn't contain a valid root Publisher element.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 1009 — error %1: App manifest validation error: Line %2, Column %3, Reason: Element "Capabilities" with namespace "%4" is only valid for main and framewor...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 1010 — error %1: App manifest validation error: Line %2, Column %3, Reason: Element "Capabilities" with namespace "%4" is only valid for main packages.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
value | — |
Event ID 1011 — error %1: App manifest validation error: Line %2, Column %3, Reason: Element "DependencyTarget" is only valid for main packages.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 1012 — error %1: App manifest validation error: Line %2, Column %3, Reason: Attribute "%4" requires CompatMode with value "%5".
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
extensionCategoryName | — |
attributeName | — |
Event ID 1013 — error %1: App manifest validation error: Line %2, Column %3, Reason: Element "%4" requires CompatMode with value "%5".
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
extensionCategoryName | — |
attributeName | — |
Event ID 1014 — error %1: App manifest validation error: Line %2, Column %3, Reason: TrustLevel value "appSilo" must declare RuntimeBehavior with value "packagedCl...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 1015 — error %1: App manifest validation error: Line %2, Column %3, Reason: Attribute "%4" value "%5" on element "%6" must not contain a file having disal...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
attributeName | — |
attributeValue | — |
elementName | — |
disallowedFileExtensions | — |
References
Event ID 1016 — error %1: App manifest validation error: Line %2, Column %3, Reason: RuntimeBehavior value "appSilo" must declare TrustLevel with value "appContain...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 1017 — error %1: App manifest validation error: Line %2, Column %3, Reason: The AppLifeCycleBehavior attribute value "%4" on element "%5" is not valid wit...
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
attributeName1 | — |
attributeName2 | — |
elementName | — |
Event ID 1018 —
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 1018 — error %1: App manifest validation error: Line %2, Column %3, Reason: Element "TrustedLaunch" is only valid for main packages.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 1019 —
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 1019 — error %1: App manifest validation error: Line %2, Column %3, Reason: Element "AppExtension com.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |
lineNumber | — |
columnNumber | — |
Event ID 1020 —
Fields
| Name | Description |
|---|---|
errorCode | — |
Event ID 1020 — error %1: For app packages containing AppExtension com.
Message
Fields
| Name | Description |
|---|---|
errorCode | — |