Microsoft-IEFRAME
Event ID 1: Frame_URLEntered
#Event ID 2: Window_Minimized
#Event ID 3: Window_Maximized
#Event ID 4: BrowserThreadProc_StartFrame
#Event ID 5: BrowserThreadProc_Return
#Event ID 6: BackNaviagation_Requested
#Event ID 7: BrowserThreadProc_Next
#Event ID 8: BrowserThreadProc_Prior
#Event ID 12: Shdocvw_BaseBrowser_DocumentComplete
#Fields #
| Name | Description |
|---|---|
TabID UInt32 | |
TabState UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 12,
"version": 0,
"level": 0,
"task": 11,
"opcode": 0,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.761718200+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 9756,
"thread_id": 5064
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "402",
"TabState": "0"
},
"message": ""
}
Event ID 13: Browseui_FeedViewer_PreviewStreamStart
#Event ID 14: Browseui_FeedViewer_PreviewStreamStop
#Event ID 15: Shdocvw_Feed_SearchStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 15,
"version": 0,
"level": 0,
"task": 13,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.749878100+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 9756,
"thread_id": 5064
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 16: Shdocvw_Feed_SearchStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 16,
"version": 0,
"level": 0,
"task": 13,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.750224500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 9756,
"thread_id": 5064
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 18: Browseui_Tabs_AddTabAPI
#Fields #
| Name | Description |
|---|---|
TabID UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 18,
"version": 0,
"level": 0,
"task": 15,
"opcode": 0,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:34.019964500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "401"
},
"message": ""
}
Event ID 19: Browseui_Tabs_TabReadyForNavigate
#Fields #
| Name | Description |
|---|---|
HWND Pointer | |
TabID UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 19,
"version": 0,
"level": 0,
"task": 16,
"opcode": 0,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.061341400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"HWND": "0x200DC",
"TabID": "401"
},
"message": ""
}
Event ID 22: Browseui_Tabs_SwitchTabsStart
#Fields #
| Name | Description |
|---|---|
TabID UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 22,
"version": 0,
"level": 0,
"task": 18,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.057443900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "401"
},
"message": ""
}
Event ID 23: Browseui_Tabs_SwitchTabsStop
#Fields #
| Name | Description |
|---|---|
TabID UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 23,
"version": 0,
"level": 0,
"task": 18,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.061144100+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "401"
},
"message": ""
}
Event ID 24: Browseui_Tabs_CloseOtherTabsStart
#Event ID 25: Browseui_Tabs_CloseOtherTabsStop
#Event ID 26: Browseui_CBrowserFrame_CloseStart
#Event ID 27: Browseui_CBrowserFrame_CloseStop
#Event ID 30: Shdocvw_PanningTool_ScrollElementByStart
#Event ID 31: Shdocvw_PanningTool_ScrollElementByStop
#Event ID 32: Shdocvw_PanningTool_GetPanningPropertiesStart
#Event ID 33: Shdocvw_PanningTool_GetPanningPropertiesStop
#Event ID 34: Imaging_CreateWebPagePreviewStart
#Event ID 35: Imaging_CreateWebPagePreviewStop
#Event ID 36: Imaging_SendIconicThumbnailStart
#Event ID 37: Imaging_SendIconicThumbnailStop
#Event ID 38: Imaging_SendIconicLivePreviewBitmapStart
#Event ID 39: Imaging_SendIconicLivePreviewBitmapStop
#Event ID 40: HistoryBrokerStartupStart
#Event ID 41: HistoryBrokerStartupStop
#Event ID 42: HistoryBrokerShutdownStart
#Event ID 43: HistoryBrokerShutdownStop
#Event ID 44: AddToHistoryStart
#Event ID 45: AddToHistoryStop
#Event ID 46: QueryHistoryStart
#Event ID 47: QueryHistoryStop
#Event ID 48: EnumHistoryRecordsStart
#Event ID 49: EnumHistoryRecordsStop
#Event ID 50: LegacyHistoryAddStart
#Event ID 51: LegacyHistoryAddStop
#Event ID 52: LegacyHistoryQueryStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 52,
"version": 0,
"level": 0,
"task": 33,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:13:14.281866100+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 13900,
"thread_id": 3392
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 53: LegacyHistoryQueryStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 53,
"version": 0,
"level": 0,
"task": 33,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:13:14.291620400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 13900,
"thread_id": 3392
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 54: LegacyHistoryEnumStart
#Event ID 55: LegacyHistoryEnumStop
#Event ID 56: CreateThumbnailStart
#Event ID 57: CreateThumbnailStop
#Event ID 58: ScaleThumbnailStart
#Event ID 59: ScaleThumbnailStop
#Event ID 60: CompressThumbnailStart
#Event ID 61: CompressThumbnailStop
#Event ID 62: GenerateThumbnailStart
#Event ID 63: GenerateThumbnailStop
#Event ID 65: ExtensionCreateStart
#Fields #
| Name | Description |
|---|---|
CLSID GUID |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 65,
"version": 0,
"level": 0,
"task": 40,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:34.899781500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CLSID": "{1fd49718-1d00-4b19-af5f-070af6d5d54c}"
},
"message": ""
}
Event ID 66: ExtensionCreateStop
#Fields #
| Name | Description |
|---|---|
CLSID GUID |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 66,
"version": 0,
"level": 0,
"task": 40,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:34.936010900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CLSID": "{1fd49718-1d00-4b19-af5f-070af6d5d54c}"
},
"message": ""
}
Event ID 67: ExtensionSetSiteStart
#Fields #
| Name | Description |
|---|---|
CLSID GUID |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 67,
"version": 0,
"level": 0,
"task": 41,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:34.936026900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CLSID": "{1fd49718-1d00-4b19-af5f-070af6d5d54c}"
},
"message": ""
}
Event ID 68: ExtensionSetSiteStop
#Fields #
| Name | Description |
|---|---|
CLSID GUID |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 68,
"version": 0,
"level": 0,
"task": 41,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:34.936072900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"CLSID": "{1fd49718-1d00-4b19-af5f-070af6d5d54c}"
},
"message": ""
}
Event ID 77: WinMain
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 77,
"version": 0,
"level": 0,
"task": 46,
"opcode": 0,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.403070000+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 80: OnlineHistoryAddStart
#Event ID 81: OnlineHistoryAddStop
#Event ID 82: OnlineHistoryCollectDataStart
#Event ID 83: OnlineHistoryCollectDataStop
#Event ID 84: OnlineHistoryDeleteStart
#Event ID 85: OnlineHistoryDeleteStop
#Event ID 86: OnlineHistoryClearStart
#Event ID 87: OnlineHistoryClearStop
#Event ID 88: Browseui_CBrowserFrame_CreateInstanceStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 88,
"version": 0,
"level": 0,
"task": 53,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.752994000+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 89: Browseui_CBrowserFrame_CreateInstanceStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 89,
"version": 0,
"level": 0,
"task": 53,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:34.019821900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 90: Frame_OnCreateStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 90,
"version": 0,
"level": 0,
"task": 54,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.767850000+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 91: Frame_OnCreateStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 91,
"version": 0,
"level": 0,
"task": 54,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.785786400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 92: Frame_CommandBarCreateStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 92,
"version": 0,
"level": 0,
"task": 55,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.964306400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 93: Frame_CommandBarCreateStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 93,
"version": 0,
"level": 0,
"task": 55,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.966101700+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 94: Frame_CommandBandCreateStart
#Event ID 95: Frame_CommandBandCreateStop
#Event ID 100: Frame_LinksBandCreateStart
#Event ID 101: Frame_LinksBandCreateStop
#Event ID 102: Frame_NavBarCreateStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 102,
"version": 0,
"level": 0,
"task": 60,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.793064700+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 103: Frame_NavBarCreateStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 103,
"version": 0,
"level": 0,
"task": 60,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.964281900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 104: Frame_TravelBandCreateStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 104,
"version": 0,
"level": 0,
"task": 61,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.794611300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 105: Frame_TravelBandCreateStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 105,
"version": 0,
"level": 0,
"task": 61,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.818138800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 106: Frame_AddressBandCreateStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 106,
"version": 0,
"level": 0,
"task": 62,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.818153500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 107: Frame_AddressBandCreateStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 107,
"version": 0,
"level": 0,
"task": 62,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.898867900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 108: Frame_SearchBandCreateStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 108,
"version": 0,
"level": 0,
"task": 63,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.898888800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 109: Frame_SearchBandCreateStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 109,
"version": 0,
"level": 0,
"task": 63,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.914777900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 110: Frame_LoadFrameStateStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 110,
"version": 0,
"level": 0,
"task": 64,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.791336200+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 111: Frame_LoadFrameStateStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 111,
"version": 0,
"level": 0,
"task": 64,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:34.017569600+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 112: Frame_Show
#Event ID 113: Browseui_Tabs_WaitMessageStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 113,
"version": 0,
"level": 0,
"task": 66,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.068810000+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 114: Browseui_Tabs_WaitMessageStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 114,
"version": 0,
"level": 0,
"task": 66,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.076695700+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 131: UnifiedListView_DefaultAction
#Event ID 132: UnifiedListView_SwitchMode
#Event ID 135: Tab_ShellBrowserOnCreateStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 135,
"version": 0,
"level": 0,
"task": 78,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:34.853015600+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 136: Tab_ShellBrowserOnCreateStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 136,
"version": 0,
"level": 0,
"task": 78,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:34.939527500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 137: Tab_InitializeBrowserStateStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 137,
"version": 0,
"level": 0,
"task": 79,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:34.894731800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 138: Tab_InitializeBrowserStateStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 138,
"version": 0,
"level": 0,
"task": 79,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:34.936986200+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 139: Tab_NavigateToPidl
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 139,
"version": 0,
"level": 0,
"task": 80,
"opcode": 0,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:34.937003400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 140: Menuband_PopulateShellFolderToolbarStart
#Event ID 141: Menuband_PopulateShellFolderToolbarStop
#Event ID 142: CreateHTMLPreviewStart
#Event ID 143: CreateHTMLPreviewStop
#Event ID 144: CreateHTMLPreview_ShowWindow
#Event ID 145: FavoritesBar_PopulateFeedsMenuStart
#Event ID 146: FavoritesBar_PopulateFeedsMenuStop
#Event ID 151: Find_ActivateBarStart
#Event ID 152: Find_ActivateBarStop
#Event ID 153: Find_FindHitsStart
#Event ID 154: Find_FindHitsStop
#Event ID 155: Find_HighlightHitsStart
#Event ID 156: Find_HighlightHitsStop
#Event ID 158: Find_ChangeSelectedHitStart
#Event ID 159: Find_ChangeSelectedHitStop
#Event ID 160: Find_DeactivateBarStart
#Event ID 161: Find_DeactivateBarStop
#Event ID 162: Search_SuggestionsDownload
#Event ID 163: Search_SuggestionsProcessingStart
#Event ID 164: Search_SuggestionsProcessingStop
#Event ID 165: Search_ImageProcessingStart
#Event ID 166: Search_ImageProcessingStop
#Event ID 167: Browseui_Tabs_DropOnFavorites
#Event ID 168: Browseui_Favs_ItemsChanged
#Event ID 169: Addressbar_InlineAutocompleteStart
#Event ID 170: Addressbar_InlineAutocompleteStop
#Event ID 171: NewTabPage_ShowStart
#Event ID 172: NewTabPage_ShowStop
#Event ID 175: Window_Resized
#Event ID 176: Window_Restored
#Event ID 177: DLM_DownloadWindow_ShowStart
#Event ID 178: DLM_DownloadWindow_ShowStop
#Event ID 179: DLM_DownloadWindow_HideStart
#Event ID 180: DLM_DownloadWindow_HideStop
#Event ID 181: FirstRunDialog_Show
#Event ID 182: Browseui_CBrowserFrame_OnClose
#Event ID 183: Shdocvw_BaseBrowser_FireEvent_BeforeNavigateStart
#Fields #
| Name | Description |
|---|---|
TabID UInt32 | |
TabState UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 183,
"version": 0,
"level": 0,
"task": 183,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.618466300+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "75551903-F33B-4E49-B818-F710D919A47D"
},
"execution": {
"process_id": 9756,
"thread_id": 5064
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "402",
"TabState": "0"
},
"message": ""
}
Event ID 184: Shdocvw_BaseBrowser_FireEvent_BeforeNavigateStop
#Fields #
| Name | Description |
|---|---|
TabID UInt32 | |
TabState UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 184,
"version": 0,
"level": 0,
"task": 183,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.618612000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "75551903-F33B-4E49-B818-F710D919A47D"
},
"execution": {
"process_id": 9756,
"thread_id": 5064
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "402",
"TabState": "0"
},
"message": ""
}
Event ID 185: Shdocvw_BaseBrowser_FireEvent_DocumentCompleteStart
#Fields #
| Name | Description |
|---|---|
TabID UInt32 | |
TabState UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 185,
"version": 0,
"level": 0,
"task": 185,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.761068300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 9756,
"thread_id": 5064
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "402",
"TabState": "0"
},
"message": ""
}
Event ID 186: Shdocvw_BaseBrowser_FireEvent_DocumentCompleteStop
#Fields #
| Name | Description |
|---|---|
TabID UInt32 | |
TabState UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 186,
"version": 0,
"level": 0,
"task": 185,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.761233300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 9756,
"thread_id": 5064
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "402",
"TabState": "0"
},
"message": ""
}
Event ID 187: Shdocvw_BaseBrowser_FireEvent_DownloadBeginStart
#Fields #
| Name | Description |
|---|---|
TabID UInt32 | |
TabState UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 187,
"version": 0,
"level": 0,
"task": 187,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.618883900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "75551903-F33B-4E49-B818-F710D919A47D"
},
"execution": {
"process_id": 9756,
"thread_id": 5064
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "402",
"TabState": "0"
},
"message": ""
}
Event ID 188: Shdocvw_BaseBrowser_FireEvent_DownloadBeginStop
#Fields #
| Name | Description |
|---|---|
TabID UInt32 | |
TabState UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 188,
"version": 0,
"level": 0,
"task": 187,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.619243600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "75551903-F33B-4E49-B818-F710D919A47D"
},
"execution": {
"process_id": 9756,
"thread_id": 5064
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "402",
"TabState": "0"
},
"message": ""
}
Event ID 189: Shdocvw_BaseBrowser_FireEvent_DownloadCompleteStart
#Fields #
| Name | Description |
|---|---|
TabID UInt32 | |
TabState UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 189,
"version": 0,
"level": 0,
"task": 189,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:36.137558100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "BF06581C-468A-42B7-97C8-3F881C0E620F"
},
"execution": {
"process_id": 9756,
"thread_id": 5064
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "402",
"TabState": "0"
},
"message": ""
}
Event ID 190: Shdocvw_BaseBrowser_FireEvent_DownloadCompleteStop
#Fields #
| Name | Description |
|---|---|
TabID UInt32 | |
TabState UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 190,
"version": 0,
"level": 0,
"task": 189,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:36.137674700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "BF06581C-468A-42B7-97C8-3F881C0E620F"
},
"execution": {
"process_id": 9756,
"thread_id": 5064
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "402",
"TabState": "0"
},
"message": ""
}
Event ID 191: Shdocvw_BaseBrowser_FireEvent_NavigateCompleteStart
#Fields #
| Name | Description |
|---|---|
TabID UInt32 | |
TabState UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 191,
"version": 0,
"level": 0,
"task": 191,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:36.137923900+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "BF06581C-468A-42B7-97C8-3F881C0E620F"
},
"execution": {
"process_id": 9756,
"thread_id": 5064
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "402",
"TabState": "0"
},
"message": ""
}
Event ID 192: Shdocvw_BaseBrowser_FireEvent_NavigateCompleteStop
#Fields #
| Name | Description |
|---|---|
TabID UInt32 | |
TabState UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 192,
"version": 0,
"level": 0,
"task": 191,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:36.138057700+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "BF06581C-468A-42B7-97C8-3F881C0E620F"
},
"execution": {
"process_id": 9756,
"thread_id": 5064
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "402",
"TabState": "0"
},
"message": ""
}
Event ID 193: Shdocvw_BaseBrowser_FireEvent_NavigateErrorStart
#Event ID 194: Shdocvw_BaseBrowser_FireEvent_NavigateErrorStop
#Event ID 195: Shdocvw_BaseBrowser_FireEvent_NewWindowStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 195,
"version": 0,
"level": 0,
"task": 195,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.150582500+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "B0050925-866A-40F9-9AA8-A8A54518DB82"
},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 196: Shdocvw_BaseBrowser_FireEvent_NewWindowStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 196,
"version": 0,
"level": 0,
"task": 195,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.150618200+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "B0050925-866A-40F9-9AA8-A8A54518DB82"
},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 197: Shdocvw_BaseBrowser_FireEvent_QuitStart
#Event ID 198: Shdocvw_BaseBrowser_FireEvent_QuitStop
#Event ID 199: Shdocvw_BaseBrowser_FireEvent_WindowStateChangedStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 199,
"version": 0,
"level": 0,
"task": 199,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.068070100+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 200: Shdocvw_BaseBrowser_FireEvent_WindowStateChangedStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 200,
"version": 0,
"level": 0,
"task": 199,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.068090300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 201: Shdocvw_BaseBrowser_FireEvent_NewWindow2Start
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 201,
"version": 0,
"level": 0,
"task": 201,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.137334600+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "B0050925-866A-40F9-9AA8-A8A54518DB82"
},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 202: Shdocvw_BaseBrowser_FireEvent_NewWindow2Stop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 202,
"version": 0,
"level": 0,
"task": 201,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.137354100+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "B0050925-866A-40F9-9AA8-A8A54518DB82"
},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 203: Shdocvw_BaseBrowser_FireEvent_NewWindow3Start
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 203,
"version": 0,
"level": 0,
"task": 203,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.136532400+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "B0050925-866A-40F9-9AA8-A8A54518DB82"
},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 204: Shdocvw_BaseBrowser_FireEvent_NewWindow3Stop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 204,
"version": 0,
"level": 0,
"task": 203,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:35.137317000+00:00",
"event_record_id": 0,
"correlation": {
"ActivityID": "B0050925-866A-40F9-9AA8-A8A54518DB82"
},
"execution": {
"process_id": 8032,
"thread_id": 1048
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 205: DLM_Security_MalwareStart
#Event ID 206: DLM_Security_MalwareStop
#Event ID 207: DLM_Security_AntiVirusStart
#Event ID 208: DLM_Security_AntiVirusStop
#Event ID 209: DLM_Security_WVTStart
#Event ID 210: DLM_Security_WVTStop
#Event ID 211: DLM_Security_HashStart
#Event ID 212: DLM_Security_HashStop
#Event ID 213: DLM_Security_AppRepStart
#Event ID 214: DLM_Security_AppRepStop
#Event ID 215: DLM_DownloadBar_ShowStart
#Event ID 216: DLM_DownloadBar_ShowStop
#Event ID 218: DLM_DownloadBar_CloseStop
#Event ID 219: Frame_MinIETabBandCreateStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 219,
"version": 0,
"level": 0,
"task": 219,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.924475100+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 220: Frame_MinIETabBandCreateStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 220,
"version": 0,
"level": 0,
"task": 219,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.946403800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 221: Frame_ControlBandCreateStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 221,
"version": 0,
"level": 0,
"task": 221,
"opcode": 1,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.914812000+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 222: Frame_ControlBandCreateStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 222,
"version": 0,
"level": 0,
"task": 221,
"opcode": 2,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:33.924460300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 223: Frame_TabBandMoveStart
#Event ID 224: Frame_TabBandMoveStop
#Event ID 226: DLM_Resume_TimeStart
#Event ID 227: DLM_Resume_TimeStop
#Event ID 229: Find_FindFirstHitStart
#Event ID 230: Find_FindFirstHitStop
#Event ID 231: Find_MatchAndHighlightHitsStart
#Event ID 233: Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecuteStart
#Event ID 234: Shdocvw_BaseBrowser_FireEvent_BeforeScriptExecuteStop
#Event ID 302: Browseui_ActivationRegistrar_CreateComponentStart
#Event ID 303: Browseui_ActivationRegistrar_CreateComponentStop
#Event ID 304: Browseui_ActivationRegistrar_OnCleanupStart
#Event ID 305: Browseui_ActivationRegistrar_OnCleanupStop
#Event ID 316: NotificationManager_NotificationBarReady
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 316,
"version": 0,
"level": 0,
"task": 320,
"opcode": 0,
"keywords": "0x80000",
"time_created": "2026-07-19T04:37:33.785717400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 318: NotificationManager_NotificationBarButtonClick
#Fields #
| Name | Description |
|---|---|
LayerValue | |
CommandID |
Event ID 320: NotificationBar_ShowStart
#Event ID 321: NotificationBar_ShowStop
#Event ID 322: NotificationBar_HideStart
#Event ID 323: NotificationBar_HideStop
#Event ID 324: NotificationBar_UpdateStart
#Event ID 325: NotificationBar_UpdateStop
#Event ID 326: NotificationBar_OverrideShow
#Event ID 327: NotificationBar_Flash
#Event ID 336: Tab_Recover_Complete
#Event ID 339: Frame_AddFirstTab
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 339,
"version": 0,
"level": 0,
"task": 339,
"opcode": 0,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:34.019832200+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 343: FindBar_TermChange
#Event ID 350: UnifiedListView_MultipleCharacterQuery
#Event ID 351: IMTravelLogMVC_WaitForPageTimeout
#Event ID 352: IMTravelLogMVC_NavigationReceived
#Event ID 354: Browseui_Tabs_OnNavigateComplete2
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 354,
"version": 0,
"level": 0,
"task": 354,
"opcode": 0,
"keywords": "0x100",
"time_created": "2026-07-19T04:37:36.139404500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 6796
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 360: RehydrateTabStart
#Event ID 361: RehydrateTabStop
#Event ID 362: GetHalfTabDataStart
#Event ID 363: GetHalfTabDataStop
#Event ID 386: InputPanelShowStart
#Event ID 387: InputPanelShowStop
#Event ID 388: InputPanelHideStart
#Event ID 389: InputPanelHideStop
#Event ID 391: InputPanelResizeStart
#Event ID 392: InputPanelResizeStop
#Event ID 395: BrowserFrame_AddTab_WaitForActivationKindStart
#Event ID 396: BrowserFrame_AddTab_WaitForActivationKindStop
#Event ID 403: Browseui_HangUIStart
#Event ID 404: Browseui_HangUIStop
#Event ID 407: Browseui_HangUI_DisparentAndDetachBrowserTabStart
#Fields #
| Name | Description |
|---|---|
Disconnect | |
TabID | |
HRESULT |
Event ID 408: Browseui_HangUI_DisparentAndDetachBrowserTabStop
#Fields #
| Name | Description |
|---|---|
Disconnect | |
TabID | |
HRESULT |
Event ID 412: Browseui_HangUI_AttachThreadInputHelperStart
#Fields #
| Name | Description |
|---|---|
Attach | |
TabID | |
AttachTID | |
AttachToTID | |
HRESULT |
Event ID 413: Browseui_HangUI_AttachThreadInputHelperStop
#Fields #
| Name | Description |
|---|---|
Attach | |
TabID | |
AttachTID | |
AttachToTID | |
HRESULT |
Event ID 417: Browseui_Tabs_MarkTabAsNotHung
#Fields #
| Name | Description |
|---|---|
TabID | |
SelfRecovered | |
PerformWhenBrowserResponds |
Event ID 420: Browseui_Tabs_BrowserTabRespondsNow_TabHung
#Fields #
| Name | Description |
|---|---|
HRESULT | |
TabID | |
SyncTimeout | |
SetHung | |
UserAction |
Event ID 421: AutoSuggest_DropDown_ShowStart
#Event ID 422: AutoSuggest_DropDown_ShowStop
#Event ID 423: AutoSuggest_DropDown_HideStart
#Event ID 424: AutoSuggest_DropDown_HideStop
#Event ID 425: ImageStore_Activity_SingleImage
#Fields #
| Name | Description |
|---|---|
PID | |
ActivityType | |
ImageKey | |
ImageUniqueID | |
ImageDimX | |
ImageDimY | |
ImageCleaningScheme | |
ImageLastUpdatedTime | |
ImageLastRetrievedTime |
Event ID 426: ImageStore_Activity_ImageTotal
#Fields #
| Name | Description |
|---|---|
PID | |
ActivityType | |
ImageKey | |
TotalNumber |
Event ID 429: Iso_Dependencies_AddDependency
#Fields #
| Name | Description |
|---|---|
Target UInt32 | |
TargetPID UInt32 | |
Dependent UInt32 | |
DependentPID UInt32 | |
Flags UInt32 | |
Reason UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 429,
"version": 0,
"level": 0,
"task": 427,
"opcode": 0,
"keywords": "0x800000",
"time_created": "2026-07-19T04:37:33.713351300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Target": "132098",
"TargetPID": "0",
"Dependent": "132098",
"DependentPID": "0",
"Flags": "1",
"Reason": "2"
},
"message": ""
}
Event ID 430: Iso_Dependencies_RemoveDependency
#Fields #
| Name | Description |
|---|---|
Target UInt32 | |
TargetPID UInt32 | |
Dependent UInt32 | |
DependentPID UInt32 | |
Flags UInt32 | |
Reason UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 430,
"version": 0,
"level": 0,
"task": 428,
"opcode": 0,
"keywords": "0x800000",
"time_created": "2026-07-19T04:37:33.752976300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"Target": "132098",
"TargetPID": "8032",
"Dependent": "132098",
"DependentPID": "8032",
"Flags": "1",
"Reason": "2"
},
"message": ""
}
Event ID 459: TabRoaming_PLMSuspendWithOutstandingTimer
#Event ID 461: TabRoaming_SessionTimerFired
#Event ID 478: CAsyncStorage_WorkPendingStart
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 478,
"version": 0,
"level": 0,
"task": 458,
"opcode": 1,
"keywords": "0x800",
"time_created": "2026-07-19T04:37:33.780686900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 479: CAsyncStorage_WorkPendingStop
#Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 479,
"version": 0,
"level": 0,
"task": 458,
"opcode": 2,
"keywords": "0x800",
"time_created": "2026-07-19T04:37:33.806709900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 4008
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {},
"message": ""
}
Event ID 485: Tab_BFCache_Resume
#Event ID 512: EmptyTab_Reuse_ReinitializeBrowserTab_Begin
#Event ID 513: EmptyTab_Reuse_ReinitializeBrowserTab_Failed
#Event ID 521: NewTabPageData_BuildStart
#Event ID 522: NewTabPageData_BuildStop
#Event ID 523: NewTabPageData_RefreshStart
#Event ID 524: NewTabPageData_RefreshStop
#Event ID 526: IntelliForms_Evaluate_AutoStuffStart
#Event ID 527: IntelliForms_Evaluate_AutoStuffStop
#Event ID 528: IntelliForms_Do_AutoStuffStart
#Event ID 529: IntelliForms_Do_AutoStuffStop
#Event ID 532: DownloadWindow_Item_Added
#Event ID 535: DominantImageClassifier
#Fields #
| Name | Description |
|---|---|
Count UInt32 | |
DominantImageUrl1 UnicodeString | |
DominantImageUrl2 UnicodeString | |
DominantImageUrl3 UnicodeString | |
DominantImageUrl4 UnicodeString |
Event ID 536: TravelLogScreenshotNav_OldTab_ReadyToClose
#Event ID 537: TravelLogScreenshotNav_OldTab_WantsToCancelSwitch
#Event ID 538: TravelLogScreenshotNav_OldTab_CancelingSwitch
#Event ID 539: TravelLogScreenshotNav_OldTab_CannotCancelSwitch
#Event ID 540: TravelLogScreenshotNav_NewTab_IsReadyToSwitch
#Event ID 541: TravelLogScreenshotNav_NewTab_IsNotReadyToSwitch
#Event ID 542: TravelLogScreenshotNav_NewTab_GetReadyToSwitch
#Event ID 543: TravelLogScreenshotNav_NewTab_NowReadyToSwitch
#Event ID 544: TravelLogScreenshotNav_NewTab_SetAsHiddenTab
#Event ID 545: TravelLogScreenshotNav_NewTab_ShowingScreenshotBeforeSwitch
#Event ID 546: TravelLogScreenshotNav_NewTab_ShowingAllScreenshotsOnSwitch
#Event ID 547: Tab_BFCache_Suspend
#Event ID 552: PinnedSites_OfferedImage
#Fields #
| Name | Description |
|---|---|
ImageUrl UnicodeString | |
ImageType UInt32 | |
DIType UInt32 | |
DIConfidence UInt32 | |
TileSize UInt32 |
Event ID 553: PinnedSites_OfferedImagesComplete
#Event ID 554: TabRoaming_DeleteInvalidOrExpiredTabFile
#Event ID 556: Browseui_PrepareVisibleAsyncStart
#Fields #
| Name | Description |
|---|---|
NotifyFrame Boolean | |
Result UInt32 |
Event ID 557: Browseui_PrepareVisibleAsyncStop
#Fields #
| Name | Description |
|---|---|
NotifyFrame Boolean | |
Result UInt32 |
Event ID 558: Browseui_OnPrepareVisibleCompleteStart
#Fields #
| Name | Description |
|---|---|
TabID Int32 | |
SelectTabAsyncTabID Int32 | |
SelectTabAsyncFlags UInt32 | |
Result UInt32 |
Event ID 559: Browseui_OnPrepareVisibleCompleteStop
#Fields #
| Name | Description |
|---|---|
TabID Int32 | |
SelectTabAsyncTabID Int32 | |
SelectTabAsyncFlags UInt32 | |
Result UInt32 |
Event ID 560: Browseui_SelectTabTimerCreated
#Fields #
| Name | Description |
|---|---|
SelectTabAsyncTabID Int32 | |
SelectTabAsyncFlags UInt32 |
Event ID 561: Browseui_SelectTabTimerTriggered
#Event ID 562: Browseui_SelectTabTimerCancelled
#Fields #
| Name | Description |
|---|---|
SelectTabAsyncTabID Int32 | |
SelectTabAsyncFlags UInt32 |
Event ID 563: Browseui_TabWindow_SetVisibleStart
#Fields #
| Name | Description |
|---|---|
TabID Int32 | |
NewVisibleState Boolean | |
CurrentVisibleState Boolean | |
IsTabSwitch Boolean | |
IsHung Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 563,
"version": 0,
"level": 0,
"task": 524,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:37:35.058716600+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Microsoft-IEFRAME/Diagnostic",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "401",
"NewVisibleState": "true",
"CurrentVisibleState": "false",
"IsTabSwitch": "true",
"IsHung": "false"
},
"message": ""
}
Event ID 564: Browseui_TabWindow_SetVisibleStop
#Fields #
| Name | Description |
|---|---|
TabID Int32 | |
NewVisibleState Boolean | |
CurrentVisibleState Boolean | |
IsTabSwitch Boolean | |
IsHung Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 564,
"version": 0,
"level": 0,
"task": 524,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:37:35.059039800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Microsoft-IEFRAME/Diagnostic",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "401",
"NewVisibleState": "true",
"CurrentVisibleState": "true",
"IsTabSwitch": "true",
"IsHung": "false"
},
"message": ""
}
Event ID 565: IdleManager_AddIdleTask
#Fields #
| Name | Description |
|---|---|
ISO_HANDLE UInt64 | |
IDLEMANAGER_TASKTYPE UInt32 | |
TaskID UInt32 | |
MaxWaitingTime UInt32 | |
MaxBlockingTime UInt32 | |
IDLETASK_PRIORITY UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 565,
"version": 0,
"level": 0,
"task": 525,
"opcode": 0,
"keywords": "0x0",
"time_created": "2026-07-19T04:37:34.019136300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 13764
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ISO_HANDLE": "197634",
"IDLEMANAGER_TASKTYPE": "1007",
"TaskID": "4",
"MaxWaitingTime": "10000",
"MaxBlockingTime": "100",
"IDLETASK_PRIORITY": "10"
},
"message": ""
}
Event ID 566: IdleManager_AddRunningTask
#Fields #
| Name | Description |
|---|---|
ISO_HANDLE UInt64 | |
IDLEMANAGER_TASKTYPE UInt32 | |
TaskID UInt32 | |
MaxWaitingTime UInt32 | |
MaxBlockingTime UInt32 | |
IDLETASK_PRIORITY UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 566,
"version": 0,
"level": 0,
"task": 526,
"opcode": 0,
"keywords": "0x0",
"time_created": "2026-07-19T04:37:34.019066800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 13764
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"ISO_HANDLE": "197634",
"IDLEMANAGER_TASKTYPE": "1",
"TaskID": "3",
"MaxWaitingTime": "10000",
"MaxBlockingTime": "15000",
"IDLETASK_PRIORITY": "20"
},
"message": ""
}
Event ID 567: IdleManager_RemoveTask
#Fields #
| Name | Description |
|---|---|
ISO_HANDLE | |
IDLEMANAGER_TASKTYPE | |
TaskID | |
MaxWaitingTime | |
MaxBlockingTime | |
IDLETASK_PRIORITY |
Event ID 568: IdleManager_RunNextIdleTask
#Fields #
| Name | Description |
|---|---|
ISO_HANDLE | |
IDLEMANAGER_TASKTYPE | |
TaskID | |
MaxWaitingTime | |
MaxBlockingTime | |
IDLETASK_PRIORITY |
Event ID 569: IdleManager_RunExpiredIdleTask
#Fields #
| Name | Description |
|---|---|
ISO_HANDLE | |
IDLEMANAGER_TASKTYPE | |
TaskID | |
MaxWaitingTime | |
MaxBlockingTime | |
IDLETASK_PRIORITY |
Event ID 570: IdleManager_RemoveExpiredRunningTask
#Fields #
| Name | Description |
|---|---|
ISO_HANDLE | |
IDLEMANAGER_TASKTYPE | |
TaskID | |
MaxWaitingTime | |
MaxBlockingTime | |
IDLETASK_PRIORITY |
Event ID 571: IdleManager_TaskCount
#Fields #
| Name | Description |
|---|---|
WaitingTaskCount UInt32 | |
RunningTaskCount UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 571,
"version": 0,
"level": 0,
"task": 531,
"opcode": 0,
"keywords": "0x0",
"time_created": "2026-07-19T04:37:34.019091500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 13764
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"WaitingTaskCount": "0",
"RunningTaskCount": "1"
},
"message": ""
}
Event ID 576: NotificationBar_OverrideHide
#Event ID 577: Terminate_Browser_Tab_ProcessStart
#Fields #
| Name | Description |
|---|---|
TabID | |
AllowRecovery | |
UseWER | |
HangUIShowing | |
Result |
Event ID 578: Terminate_Browser_Tab_ProcessStop
#Fields #
| Name | Description |
|---|---|
TabID | |
AllowRecovery | |
UseWER | |
HangUIShowing | |
Result |
Event ID 586: Immersive_Travellog_NavigationStart_TimeOut
#Event ID 587: Immersive_Travellog_NavigationComplete_TimeOut
#Event ID 588: Immersive_Travellog_ScrollComplete_TimeOut
#Event ID 591: Immersive_Travellog_BeforeUnload_Fired
#Event ID 592: Browseui_BringBrowserTabAlternateOwnerForwardStart
#Fields #
| Name | Description |
|---|---|
TabID Int32 | |
IsActive Boolean | |
hwndAlternateOwner Pointer | |
fDestroyingHangUI Boolean | |
hwndNext Pointer | |
hwndPrev Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 592,
"version": 0,
"level": 0,
"task": 547,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:37:35.058888600+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Microsoft-IEFRAME/Diagnostic",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "401",
"IsActive": "true",
"hwndAlternateOwner": "0x200CC",
"fDestroyingHangUI": "false",
"hwndNext": "0x0",
"hwndPrev": "0x0"
},
"message": ""
}
Event ID 593: Browseui_BringBrowserTabAlternateOwnerForwardStop
#Fields #
| Name | Description |
|---|---|
TabID Int32 | |
IsActive Boolean | |
hwndAlternateOwner Pointer | |
fDestroyingHangUI Boolean | |
hwndNext Pointer | |
hwndPrev Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 593,
"version": 0,
"level": 0,
"task": 547,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:37:35.058906900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Microsoft-IEFRAME/Diagnostic",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"TabID": "401",
"IsActive": "true",
"hwndAlternateOwner": "0x200CC",
"fDestroyingHangUI": "false",
"hwndNext": "0x200CC",
"hwndPrev": "0x0"
},
"message": ""
}
Event ID 594: Browseui_BringBrowserTabAlternateOwnerForward_Hung
#Fields #
| Name | Description |
|---|---|
TabID UInt32 |
Event ID 597: Browseui_DestroyDetachedBrowserTabUIStart
#Fields #
| Name | Description |
|---|---|
TabID Int32 | |
IsActive Boolean |
Event ID 598: Browseui_DestroyDetachedBrowserTabUIStop
#Fields #
| Name | Description |
|---|---|
TabID Int32 | |
IsActive Boolean |
Event ID 599: Browseui_HungTabHeartBeat_Timer_Invisible
#Fields #
| Name | Description |
|---|---|
TabID Int32 | |
IsActive Boolean |
Event ID 600: TabRoaming_FindRoamedMachinesStart
#Event ID 601: TabRoaming_FindRoamedMachinesStop
#Event ID 604: TabRoaming_FindRoamedTabsStart
#Event ID 605: TabRoaming_FindRoamedTabsStop
#Event ID 612: Recovery_WriteInitialStoreStart
#Fields #
| Name | Description |
|---|---|
FileName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 612,
"version": 0,
"level": 0,
"task": 577,
"opcode": 1,
"keywords": "0x800",
"time_created": "2026-07-19T04:37:33.780652000+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FileName": "C:\\Windows\\system32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{8E910541-832B-11F1-9FD5-010101010000}.dat"
},
"message": ""
}
Event ID 613: Recovery_WriteInitialStoreStop
#Fields #
| Name | Description |
|---|---|
FileName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 613,
"version": 0,
"level": 0,
"task": 577,
"opcode": 2,
"keywords": "0x800",
"time_created": "2026-07-19T04:37:33.781897000+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 3868,
"thread_id": 12748
},
"channel": "Unknown",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"FileName": "C:\\Windows\\system32\\config\\systemprofile\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{8E910541-832B-11F1-9FD5-010101010000}.dat"
},
"message": ""
}
Event ID 616: Shdocvw_VirtualTab_RedirectUrlWithBindInfo
#Event ID 617: Shdocvw_VirtualTab_RedirectUrlWithBindInfo617
#Event ID 618: Shdocvw_VirtualTab_NavigateImmediateTab
#Event ID 619: Shdocvw_VirtualTab_NavigateImmediateTab619
#Event ID 620: Shdocvw_VirtualTab_NavigateDeferredNewTab
#Event ID 621: Shdocvw_VirtualTab_NavigateDeferredNewTab621
#Event ID 622: Shdocvw_VirtualTab_GetIWB2
#Event ID 623: Shdocvw_VirtualTab_GetIWB2623
#Event ID 624: Shdocvw_VirtualTab_NavigateTabManager
#Event ID 625: Shdocvw_VirtualTab_NavigateTabManager625
#Event ID 626: Shdocvw_VirtualTab_GetWebOCWindow
#Event ID 627: Shdocvw_VirtualTab_GetWebOCWindow627
#Event ID 628: Shdocvw_VirtualTab_NavigateInWebBrowser
#Event ID 629: Shdocvw_VirtualTab_NavigateInWebBrowser629
#Event ID 630: Shdocvw_VirtualTab_NavigateThreadProc
#Event ID 631: Shdocvw_VirtualTab_NavigateThreadProc631
#Event ID 632: Browseui_VirtualTab_PreNewFrameTabCreate
#Event ID 633: Browseui_VirtualTab_PreNewFrameTabCreate633
#Event ID 634: Browseui_VirtualTab_PostNewFrameTabCreate
#Event ID 635: Browseui_VirtualTab_PostNewFrameTabCreate635
#Event ID 636: Shdocvw_VirtualTab_NavigateThreadProc_NavigateEx2Call
#Event ID 637: Shdocvw_VirtualTab_NavigateThreadProc_NavigateEx2Call637
#Event ID 638: Shdocvw_VirtualTab_NavigateThreadProc_Navigate2Call
#Event ID 639: Shdocvw_VirtualTab_NavigateThreadProc_Navigate2Call639
#Event ID 640: Shdocvw_VirtualTab_NavigateInWebBrowser_Navigate2Call
#Event ID 641: Shdocvw_VirtualTab_NavigateInWebBrowser_Navigate2Call641
#Event ID 643: CFaviconHolder_UpdateReal
#Event ID 645: Browseui_TabSuspension_Check_Suspendable
#Fields #
| Name | Description |
|---|---|
PID | |
FoundSuspendable | |
FailureReason |
Event ID 647: Courier_FunctionalTest
#Event ID 658: HistoryJournalStart
#Fields #
| Name | Description |
|---|---|
String UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 658,
"version": 0,
"level": 4,
"task": 582,
"opcode": 1,
"keywords": "0x8000000000000100",
"time_created": "2026-07-19T04:13:14.279214900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 13900,
"thread_id": 13580
},
"channel": "Microsoft-IEFRAME/Diagnostic",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"String": "PageInteractive"
},
"message": ""
}
Event ID 659: HistoryJournalStop
#Fields #
| Name | Description |
|---|---|
String UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-IEFRAME",
"guid": "{5c8bb950-959e-4309-8908-67961a1205d5}",
"event_source_name": "",
"event_id": 659,
"version": 0,
"level": 4,
"task": 582,
"opcode": 2,
"keywords": "0x8000000000000100",
"time_created": "2026-07-19T04:13:14.279229100+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 13900,
"thread_id": 13580
},
"channel": "Microsoft-IEFRAME/Diagnostic",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"String": "PageInteractive"
},
"message": ""
}
Event ID 660: NewTabPage_SearchBox_ShowStart
#Event ID 661: NewTabPage_SearchBox_ShowStop
#Event ID 662: NewTabPage_SearchBox_HideStart
#Event ID 663: NewTabPage_SearchBox_HideStop
#Event ID 664: NewTabPage_SearchLogo_ShowStart
#Event ID 665: NewTabPage_SearchLogo_ShowStop
#Provenance
ETW provider GUID 5c8bb950-959e-4309-8908-67961a1205d5
Defined in ieframe.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 11.00.20348.3207, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 11.00.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB
- JD-WIN11-22H2-1-native-20260719, sample captured from a live trace, binary version 11.00.22621.4830, captured 2026-07-19
Native ETL capture of controlled local mshta navigation and frame workloads; identifiers were sanitized in catalog examples.