detection.wiki

Microsoft-Windows-PushNotifications-Platform › Event 2413

Event ID 2413 — An application was registered with the following parameters: PackageFullName [PackageFullName] AppUserModelId [AppUserModelId] AppSettings [Settings] AppType [AppType] ErrorCode [ErrorCode].

Provider
Microsoft-Windows-PushNotifications-Platform
Channel
Operational
Level
Informational
Opcode
Info

Description

An application was registered with the following parameters: PackageFullName [PackageFullName] AppUserModelId [AppUserModelId] AppSettings [Settings] AppType [AppType] ErrorCode [ErrorCode].

Message #

An application was registered with the following parameters: %1 [PackageFullName] %2 [AppUserModelId] %3 [Settings] %4 [AppType] %5 [ErrorCode].

Fields #

NameDescription
PackageFullName UnicodeStringAn application was registered with the following parameters.
AppUserModelId UnicodeString—
AppSettings UInt32—
AppType UInt32—
ErrorCode Int32—

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-PushNotifications-Platform",
    "guid": "88CD9180-4491-4640-B571-E3BEE2527943",
    "event_source_name": "",
    "event_id": 2413,
    "version": 0,
    "level": 4,
    "task": 0,
    "opcode": 0,
    "keywords": 9223372036863164928,
    "time_created": "2023-11-06T01:42:41.646445+00:00",
    "event_record_id": 2772,
    "correlation": {
      "ActivityID": "E4DB489E-1037-0002-14D2-F0E43710DA01"
    },
    "execution": {
      "process_id": 4304,
      "thread_id": 17760
    },
    "channel": "Microsoft-Windows-PushNotification-Platform/Operational",
    "computer": "WinDev2310Eval",
    "security": {
      "user_id": "S-1-5-21-1992711665-1655669231-58201500-1000"
    }
  },
  "event_data": {
    "PackageFullName": "SpotifyAB.SpotifyMusic_1.222.982.0_x64__zpdnekdrzrea0",
    "AppUserModelId": "SpotifyAB.SpotifyMusic_zpdnekdrzrea0!Widget",
    "AppSettings": 67141376,
    "AppType": 268435456,
    "ErrorCode": 0
  },
  "message": ""
}

References #