Microsoft-JScript

EventTitleChannelSampleRule
1MethodRundownApplicationYN
2MethodRundownApplicationYN
3MethodRundownApplicationYN
4MethodRundownApplicationYN
5MethodRundownMethodDCStartApplicationYN
6MethodRundownMethodDCEndApplicationYN
7ScriptContextRundownScriptContextDCStartApplicationYN
8ScriptContextRundownScriptContextDCEndApplicationYN
9MethodRuntimeMethodLoadApplicationYN
10MethodRuntimeMethodUnloadApplicationNN
11ScriptContextRuntimeScriptContextLoadApplicationNN
12ScriptContextRuntimeScriptContextUnloadApplicationNN
13Jscript_Projection_ResolveTypeStartApplicationNN
14Jscript_Projection_ResolveTypeStopApplicationNN
15Jscript_Projection_ConstructRuntimeClassStartApplicationNN
16Jscript_Projection_ConstructRuntimeClassStopApplicationNN
17Jscript_Projection_MethodCallStartApplicationNN
18Jscript_Projection_MethodCallStopApplicationNN
19Jscript_Projection_RawMethodCallStartApplicationNN
20Jscript_Projection_RawMethodCallStopApplicationNN
21Jscript_Projection_InvokesJsDelegateStartApplicationNN
22Jscript_Projection_InvokesJsDelegateStopApplicationNN
23Jscript_Projection_InvokeNativeDelegateStartApplicationNN
24Jscript_Projection_InvokeNativeDelegateStopApplicationNN
25Jscript_Projection_AddEventListenerStartApplicationNN
26Jscript_Projection_AddEventListenerStopApplicationNN
27Jscript_Projection_RemoveEventListenerStartApplicationNN
28Jscript_Projection_RemoveEventListenerStopApplicationNN
29Jscript_Projection_GetTypeMetaDataInformationStartApplicationNN
30Jscript_Projection_GetTypeMetaDataInformationStopApplicationNN
31Jscript_Projection_SetEventHandlerStartApplicationNN
32Jscript_Projection_SetEventHandlerStopApplicationNN
33Jscript_Projection_RemoveAllEventsAndEventHandlersStartApplicationNN
34Jscript_Projection_RemoveAllEventsAndEventHandlersStopApplicationNN
35Jscript_Projection_InvokeEventStartApplicationNN
36Jscript_Projection_InvokeEventStopApplicationNN
37Jscript_Projection_InvokeEventEvParamPrepStartApplicationNN
38Jscript_Projection_InvokeEventEvParamPrepStopApplicationNN
39ScriptContextRundownSourceDCStartApplicationYN
40ScriptContextRundownSourceDCEndApplicationYN
41ScriptContextRuntimeSourceLoadApplicationNN
42ScriptContextRuntimeSourceUnloadApplicationNN
43Jscript_Projection_GetExprFromConcreteTypeNameStartApplicationNN
44Jscript_Projection_GetExprFromConcreteTypeNameStopApplicationNN
45Jscript_Projection_GetTypeFromTypeNamePartsStartApplicationNN
46Jscript_Projection_GetTypeFromTypeNamePartsStopApplicationNN
47Jscript_Projection_ReferenceOrArrayGetValueStartApplicationNN
48Jscript_Projection_ReferenceOrArrayGetValueStopApplicationNN
49Jscript_Projection_PropertyValueVarFromGRCNStartApplicationNN
50Jscript_Projection_PropertyValueVarFromGRCNStopApplicationNN
51Jscript_Projection_VarFromGRCNStartApplicationNN
52Jscript_Projection_VarFromGRCNStopApplicationNN
53Jscript_Projection_WriteIReferenceStartApplicationNN
54Jscript_Projection_WriteIReferenceStopApplicationNN
55Jscript_Projection_WriteInspectableStartApplicationNN
56Jscript_Projection_WriteInspectableStopApplicationNN
57Jscript_Projection_GetNonArrayTypeAsPropertyValueStartApplicationNN
58Jscript_Projection_GetNonArrayTypeAsPropertyValueStopApplicationNN
59Jscript_Projection_GetNonArrayBasicTypeAsPropertyValueStartApplicationNN
60Jscript_Projection_GetNonArrayBasicTypeAsPropertyValueStopApplicationNN
61Jscript_Projection_GetTypedArrayAsPropertyValueStartApplicationNN
62Jscript_Projection_GetTypedArrayAsPropertyValueStopApplicationNN
63Jscript_Projection_GetBasicTypedArrayAsPropertyValueStartApplicationNN
64Jscript_Projection_GetBasicTypedArrayAsPropertyValueStopApplicationNN
65ParseMethodStartApplicationNN
66ParseMethodStopApplicationNN
67GenerateBytecodeMethodApplicationNN
68Jscript_GC_ResetMarksStartApplicationNN
69Jscript_GC_ResetMarksStopApplicationNN
70Jscript_GC_ScanRootsStartApplicationNN
71Jscript_GC_ScanRootsStopApplicationNN
72Jscript_GC_ScanStackStartApplicationNN
73Jscript_GC_ScanStackStopApplicationNN
74Jscript_GC_MarkStartApplicationNN
75Jscript_GC_MarkStopApplicationNN
76Jscript_GC_RescanStartApplicationNN
77Jscript_GC_RescanStopApplicationNN
78Jscript_GC_SweepStartApplicationNN
79Jscript_GC_SweepStopApplicationNN
80Jscript_GC_SetupBackgroundSweepStartApplicationNN
81Jscript_GC_SetupBackgroundSweepStopApplicationNN
82Jscript_GC_BackgroundSweepStartApplicationNN
83Jscript_GC_BackgroundSweepStopApplicationNN
84Jscript_GC_TransferSweptObjectsStartApplicationNN
85Jscript_GC_TransferSweptObjectsStopApplicationNN
86Jscript_GC_DisposeStartApplicationNN
87Jscript_GC_DisposeStopApplicationNN
88Jscript_GC_BackgroundMarkStartApplicationNN
89Jscript_GC_BackgroundMarkStopApplicationNN
90Jscript_GC_ResetWriteWatchStartApplicationNN
91Jscript_GC_ResetWriteWatchStopApplicationNN
92Jscript_Profile_PersistenceSaveApplicationNN
93ScriptContextRuntimeScriptContextOnStartupCompleteApplicationNN
94Jscript_Profile_PersistenceLoadApplicationNN
95Jscript_Backend_InlineApplicationNN
96Jscript_Method_JitStart_45_17ApplicationNN
97Jscript_Method_JitStop_45_18ApplicationNN
98Jscript_Method_JitQueueApplicationNN
99Jscript_Method_JitDequeueApplicationNN
100Jscript_GC_IdleCollectStartApplicationNN
101Jscript_GC_IdleCollectApplicationNN
102Jscript_GC_IdleCollect102ApplicationNN
103Jscript_GC_IdleCollect103ApplicationNN
104Jscript_GC_IdleCollectStopApplicationNN
105Jscript_Page_Allocator_SizeUsedPageSizeApplicationYN
106Jscript_Recycler_AllocationFree_MemoryApplicationYN
107Jscript_Recycler_AllocationFree_Memory_BlockApplicationYN
108Jscript_Recycler_AllocationAllocate_ObjectApplicationNN
109Jscript_Recycler_AllocationAllocate_ArrayApplicationNN
110Jscript_Recycler_AllocationAllocate_FunctionApplicationNN
111Jscript_Recycler_AllocationAllocate_DOM_ObjectApplicationNN
112Jscript_Recycler_AllocationAllocate_WinRT_JSProxy_ObjectApplicationNN
113Jscript_Recycler_AllocationAllocate_PixelArrayApplicationNN
114Jscript_Recycler_AllocationExternal_AddRefApplicationYN
115Jscript_Recycler_AllocationExternal_ReleaseApplicationYN
116Jscript_Recycler_AllocationAllocate_WinRT_RuntimeClass_ObjectApplicationNN
117Jscript_Recycler_AllocationAllocate_WinRT_Namespace_ObjectApplicationNN
118Jscript_Recycler_AllocationAllocate_WinRT_Struct_ObjectApplicationNN
119Jscript_Recycler_AllocationAllocate_WinRT_Enum_ObjectApplicationNN
120Jscript_Recycler_AllocationAllocate_WinRT_TypedArray_ObjectApplicationNN
121Jscript_Recycler_AllocationAllocate_WinRT_Delegate_ObjectApplicationNN
122Jscript_Recycler_AllocationAllocate_WinRT_EventHandler_ObjectApplicationNN
123Jscript_Recycler_AllocationAllocate_WinRT_Collections_ObjectApplicationNN
124Jscript_Recycler_AllocationAllocate_WinRT_PropertyValue_ObjectApplicationNN
125Jscript_Recycler_AllocationFree_WinRT_Delegate_ObjectApplicationNN
126Jscript_Recycler_AllocationFree_WinRT_EventHandler_ObjectApplicationNN
127Jscript_Recycler_AllocationFree_WinRT_Collections_ObjectApplicationNN
128Jscript_Recycler_AllocationFree_WinRT_PropertyValue_ObjectApplicationNN
129Jscript_GC_SweepWeakRefStartApplicationNN
130Jscript_GC_SweepWeakRefStopApplicationNN
131Jscript_GC_ProcessTrackedObjectStartApplicationNN
132Jscript_GC_ProcessTrackedObjectStopApplicationNN
133Jscript_GC_ProcessClientTrackedObjectStartApplicationNN
134Jscript_GC_ProcessClientTrackedObjectStopApplicationNN
135Jscript_GC_BackgroundZeroPageStartApplicationNN
136Jscript_GC_BackgroundZeroPageStopApplicationNN
137Jscript_GC_FlushZeroPageStartApplicationNN
138Jscript_GC_FlushZeroPageStopApplicationNN
139Jscript_GC_DecommitConcurrentCollectPageAllocatorStartApplicationNN
140Jscript_GC_DecommitConcurrentCollectPageAllocatorStopApplicationNN
141Jscript_GC_SweepPartialReusePageStartApplicationNN
142Jscript_GC_SweepPartialReusePageStopApplicationNN
143Jscript_GC_BackgroundRescanStartApplicationNN
144Jscript_GC_BackgroundRescanStopApplicationNN
145Jscript_GC_BackgroundResetWriteWatchStartApplicationNN
146Jscript_GC_BackgroundResetWriteWatchStopApplicationNN
147Jscript_GC_BackgroundScanRootsStartApplicationNN
148Jscript_GC_BackgroundScanRootsStopApplicationNN
149Jscript_GC_BackgroundResetMarksStartApplicationNN
150Jscript_GC_BackgroundResetMarksStopApplicationNN
151Jscript_GC_RescanMarkWaitStartApplicationNN
152Jscript_GC_RescanMarkWaitStopApplicationNN
153Jscript_GC_SynchronousMarkWaitStartApplicationNN
154Jscript_GC_SynchronousMarkWaitStopApplicationNN
155Jscript_GC_FinishConcurrentWaitStartApplicationNN
156Jscript_GC_FinishConcurrentWaitStopApplicationNN
157Jscript_GC_EndMarkOnLowMemoryStartApplicationNN
158Jscript_GC_EndMarkOnLowMemoryStopApplicationNN
159Jscript_AsyncCausality_StackTraceApplicationNN
160JScript_ByteCodeDeserializeStartApplicationNN
161JScript_ByteCodeDeserializeStopApplicationNN
162Jscript_Hosting_BinaryInconsistencyApplicationNN
163Jscript_Hosting_BinaryConsistencyInfoApplicationNN
164Jscript_StackTraceApplicationNN
165Jscript_AsyncCausality_StackTrace165ApplicationNN
166Jscript_Host_NativeApplicationNN
167Jscript_Host_Native167ApplicationNN
168Jscript_SourceMappingApplicationNN
169Jscript_GC_ParallelMarkStartApplicationNN
170Jscript_GC_ParallelMarkStopApplicationNN
171Jscript_GC_BackgroundParallelMarkStartApplicationNN
172Jscript_GC_BackgroundParallelMarkStopApplicationNN
173Memprotect_GC_ResetMarksStartApplicationNN
174Memprotect_GC_ResetMarksStopApplicationNN
175Memprotect_GC_ScanRootsStartApplicationYN
176Memprotect_GC_ScanRootsStopApplicationYN
177Memprotect_GC_ScanStackStartApplicationNN
178Memprotect_GC_ScanStackStopApplicationNN
179Memprotect_GC_MarkStartApplicationYN
180Memprotect_GC_MarkStopApplicationYN
181Memprotect_GC_RescanStartApplicationNN
182Memprotect_GC_RescanStopApplicationNN
183Memprotect_GC_SweepStartApplicationNN
184Memprotect_GC_SweepStopApplicationNN
185Memprotect_GC_SetupBackgroundSweepStartApplicationYN
186Memprotect_GC_SetupBackgroundSweepStopApplicationYN
187Memprotect_GC_BackgroundSweepStartApplicationYN
188Memprotect_GC_BackgroundSweepStopApplicationYN
189Memprotect_GC_TransferSweptObjectsStartApplicationYN
190Memprotect_GC_TransferSweptObjectsStopApplicationYN
191Memprotect_GC_DisposeStartApplicationNN
192Memprotect_GC_DisposeStopApplicationNN
193Memprotect_GC_BackgroundMarkStartApplicationYN
194Memprotect_GC_BackgroundMarkStopApplicationYN
195Memprotect_GC_ResetWriteWatchStartApplicationNN
196Memprotect_GC_ResetWriteWatchStopApplicationNN
197Memprotect_GC_IdleCollectStartApplicationNN
198Memprotect_GC_IdleCollectApplicationNN
199Memprotect_GC_IdleCollect199ApplicationNN
200Memprotect_GC_IdleCollect200ApplicationNN
201Memprotect_GC_IdleCollectStopApplicationNN
202Memprotect_GC_SweepWeakRefStartApplicationYN
203Memprotect_GC_SweepWeakRefStopApplicationNN
204Memprotect_GC_ProcessTrackedObjectStartApplicationYN
205Memprotect_GC_ProcessTrackedObjectStopApplicationYN
206Memprotect_GC_ProcessClientTrackedObjectStartApplicationYN
207Memprotect_GC_ProcessClientTrackedObjectStopApplicationYN
208Memprotect_GC_BackgroundZeroPageStartApplicationYN
209Memprotect_GC_BackgroundZeroPageStopApplicationYN
210Memprotect_GC_FlushZeroPageStartApplicationYN
211Memprotect_GC_FlushZeroPageStopApplicationYN
212Memprotect_GC_DecommitConcurrentCollectPageAllocatorStartApplicationYN
213Memprotect_GC_DecommitConcurrentCollectPageAllocatorStopApplicationYN
214Memprotect_GC_SweepPartialReusePageStartApplicationYN
215Memprotect_GC_SweepPartialReusePageStopApplicationYN
216Memprotect_GC_BackgroundRescanStartApplicationYN
217Memprotect_GC_BackgroundRescanStopApplicationYN
218Memprotect_GC_BackgroundResetWriteWatchStartApplicationYN
219Memprotect_GC_BackgroundResetWriteWatchStopApplicationYN
220Memprotect_GC_BackgroundScanRootsStartApplicationYN
221Memprotect_GC_BackgroundScanRootsStopApplicationYN
222Memprotect_GC_BackgroundResetMarksStartApplicationYN
223Memprotect_GC_BackgroundResetMarksStopApplicationYN
224Memprotect_GC_RescanMarkWaitStartApplicationYN
225Memprotect_GC_RescanMarkWaitStopApplicationYN
226Memprotect_GC_SynchronousMarkWaitStartApplicationNN
227Memprotect_GC_SynchronousMarkWaitStopApplicationNN
228Memprotect_GC_FinishConcurrentWaitStartApplicationYN
229Memprotect_GC_FinishConcurrentWaitStopApplicationYN
230Memprotect_GC_EndMarkOnLowMemoryStartApplicationNN
231Memprotect_GC_EndMarkOnLowMemoryStopApplicationNN
232Memprotect_GC_ParallelMarkStartApplicationNN
233Memprotect_GC_ParallelMarkStopApplicationNN
234Memprotect_GC_BackgroundParallelMarkStartApplicationYN
235Memprotect_GC_BackgroundParallelMarkStopApplicationYN
236Memprotect_GCStartApplicationYN
237Memprotect_GCStopApplicationYN
238Memprotect_GC_AllocationApplicationYN
239Memprotect_GC_UnrootApplicationYN
240Jscript_GC_InitApplicationNN
241Memprotect_GC_Heap_SizeApplicationYN
242Jscript_Internal_Generic_EventApplicationNN
243Jscript_GC_Bucket_StatsApplicationNN
244Memprotect_GC_Bucket_StatsApplicationYN
245Jscript_Backend_BailoutApplicationNN
246Jscript_Backend_Bailout_LoopBodyApplicationNN
247Jscript_GC_Clear_InlineCacheStartApplicationNN
248Jscript_GC_Clear_InlineCacheStopApplicationNN
249Jscript_GC_PreSweepCallbackStartApplicationNN
250Jscript_GC_PreSweepCallbackStopApplicationNN
251Memprotect_GC_PreSweepCallbackStartApplicationYN
252Memprotect_GC_PreSweepCallbackStopApplicationYN
253Jscript_GC_SweepWeakRefStop253ApplicationNN
254Memprotect_GC_SweepWeakRefStop254ApplicationYN
255Jscript_GC2StartApplicationNN
256Jscript_GC2StopApplicationNN
257Memprotect_GC2StartApplicationYN
258Memprotect_GC2StopApplicationYN

Event ID 1: MethodRundown

#
Channel
Application
Level
Informational
Task
MethodRundown
Opcode
DCStartInit

Example Event #

{
  "system": {
    "provider": "Microsoft-JScript",
    "guid": "{57277741-3638-4A4B-BDBA-0AC6E45DA56C}",
    "event_source_name": "",
    "event_id": 1,
    "version": 0,
    "level": 4,
    "task": 3,
    "opcode": 14,
    "keywords": "0x0000000000000002",
    "time_created": "2026-06-02T03:59:52.540+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 9180,
      "thread_id": 10500
    },
    "channel": "ETW Trace",
    "computer": "DESKTOP-FF3N5XK",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": "MethodRundown"
}

Event ID 2: MethodRundown

#
Channel
Application
Level
Informational
Task
MethodRundown
Opcode
DCStartComplete

Example Event #

{
  "system": {
    "provider": "Microsoft-JScript",
    "guid": "{57277741-3638-4A4B-BDBA-0AC6E45DA56C}",
    "event_source_name": "",
    "event_id": 2,
    "version": 0,
    "level": 4,
    "task": 3,
    "opcode": 12,
    "keywords": "0x0000000000000002",
    "time_created": "2026-06-02T03:59:52.540+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 9180,
      "thread_id": 10500
    },
    "channel": "ETW Trace",
    "computer": "DESKTOP-FF3N5XK",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": "MethodRundown"
}

Event ID 3: MethodRundown

#
Channel
Application
Level
Informational
Task
MethodRundown
Opcode
DCEndInit

Example Event #

{
  "system": {
    "provider": "Microsoft-JScript",
    "guid": "{57277741-3638-4A4B-BDBA-0AC6E45DA56C}",
    "event_source_name": "",
    "event_id": 3,
    "version": 0,
    "level": 4,
    "task": 3,
    "opcode": 15,
    "keywords": "0x0000000000000004",
    "time_created": "2026-06-02T03:59:52.540+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 9180,
      "thread_id": 10500
    },
    "channel": "ETW Trace",
    "computer": "DESKTOP-FF3N5XK",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": "MethodRundown"
}

Event ID 4: MethodRundown

#
Channel
Application
Level
Informational
Task
MethodRundown
Opcode
DCEndComplete

Example Event #

{
  "system": {
    "provider": "Microsoft-JScript",
    "guid": "{57277741-3638-4A4B-BDBA-0AC6E45DA56C}",
    "event_source_name": "",
    "event_id": 4,
    "version": 0,
    "level": 4,
    "task": 3,
    "opcode": 13,
    "keywords": "0x0000000000000004",
    "time_created": "2026-06-02T03:59:52.540+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 9180,
      "thread_id": 10500
    },
    "channel": "ETW Trace",
    "computer": "DESKTOP-FF3N5XK",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": "MethodRundown"
}

Event ID 5: MethodRundownMethodDCStart

#
Channel
Application
Level
Informational
Task
MethodRundown
Opcode
MethodDCStart

Fields #

NameDescription
ScriptContextID Pointer
MethodStartAddress Pointer
MethodSize UInt64
MethodID UInt32
MethodFlags UInt16
MethodAddressRangeID UInt16
SourceID UInt64
Line UInt32
Column UInt32
MethodName UnicodeString

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 5,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 1612
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 10,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:15:44.240Z",
    "version": 0
  },
  "event_data": {
    "Column": 87,
    "Line": 69,
    "MethodAddressRangeID": 1,
    "MethodFlags": 0,
    "MethodID": 117,
    "MethodName": "Anonymous function",
    "MethodSize": 8,
    "MethodStartAddress": "0x21C48300EB8",
    "ScriptContextID": "0x21C4686BF60",
    "SourceID": 0
  },
  "message": ""
}

Event ID 6: MethodRundownMethodDCEnd

#
Channel
Application
Level
Informational
Task
MethodRundown
Opcode
MethodDCEnd

Fields #

NameDescription
ScriptContextID Pointer
MethodStartAddress Pointer
MethodSize UInt64
MethodID UInt32
MethodFlags UInt16
MethodAddressRangeID UInt16
SourceID UInt64
Line UInt32
Column UInt32
MethodName UnicodeString

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 6,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 1612
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 11,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:15:44.265Z",
    "version": 0
  },
  "event_data": {
    "Column": 87,
    "Line": 69,
    "MethodAddressRangeID": 1,
    "MethodFlags": 0,
    "MethodID": 117,
    "MethodName": "Anonymous function",
    "MethodSize": 8,
    "MethodStartAddress": "0x21C48300EB8",
    "ScriptContextID": "0x21C4686BF60",
    "SourceID": 0
  },
  "message": ""
}

Event ID 7: ScriptContextRundownScriptContextDCStart

#
Channel
Application
Level
Informational
Task
ScriptContextRundown
Opcode
ScriptContextDCStart

Fields #

NameDescription
ScriptContextID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 7,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 1612
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 10,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:15:44.240Z",
    "version": 0
  },
  "event_data": {
    "ScriptContextID": "0x21C4686BF60"
  },
  "message": ""
}

Event ID 8: ScriptContextRundownScriptContextDCEnd

#
Channel
Application
Level
Informational
Task
ScriptContextRundown
Opcode
ScriptContextDCEnd

Fields #

NameDescription
ScriptContextID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 8,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 1612
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 11,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:15:44.265Z",
    "version": 0
  },
  "event_data": {
    "ScriptContextID": "0x21C4686BF60"
  },
  "message": ""
}

Event ID 9: MethodRuntimeMethodLoad

#
Channel
Application
Level
Informational
Task
MethodRuntime
Opcode
MethodLoad

Fields #

NameDescription
ScriptContextID Pointer
MethodStartAddress Pointer
MethodSize UInt64
MethodID UInt32
MethodFlags UInt16
MethodAddressRangeID UInt16
SourceID UInt64
Line UInt32
Column UInt32
MethodName UnicodeString

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 9,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 1612
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 10,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:15:44.152Z",
    "version": 0
  },
  "event_data": {
    "Column": 0,
    "Line": 0,
    "MethodAddressRangeID": 4,
    "MethodFlags": 0,
    "MethodID": 0,
    "MethodName": "supports",
    "MethodSize": 42,
    "MethodStartAddress": "0x7FFE7C519770",
    "ScriptContextID": "0x0",
    "SourceID": 0
  },
  "message": ""
}

Event ID 10: MethodRuntimeMethodUnload

#
Channel
Application
Task
MethodRuntime
Opcode
MethodUnload

Fields #

NameDescription
ScriptContextID Pointer
MethodStartAddress Pointer
MethodSize UInt64
MethodID UInt32
MethodFlags UInt16
MethodAddressRangeID UInt16
SourceID UInt64
Line UInt32
Column UInt32
MethodName UnicodeString

Event ID 11: ScriptContextRuntimeScriptContextLoad

#
Channel
Application
Task
ScriptContextRuntime
Opcode
ScriptContextLoad

Fields #

NameDescription
ScriptContextID Pointer

Event ID 12: ScriptContextRuntimeScriptContextUnload

#
Channel
Application
Task
ScriptContextRuntime
Opcode
ScriptContextUnload

Fields #

NameDescription
ScriptContextID Pointer

Event ID 13: Jscript_Projection_ResolveTypeStart

#
Channel
Application
Task
Jscript_Projection_ResolveType
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 14: Jscript_Projection_ResolveTypeStop

#
Channel
Application
Task
Jscript_Projection_ResolveType
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 15: Jscript_Projection_ConstructRuntimeClassStart

#
Channel
Application
Task
Jscript_Projection_ConstructRuntimeClass
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 16: Jscript_Projection_ConstructRuntimeClassStop

#
Channel
Application
Task
Jscript_Projection_ConstructRuntimeClass
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 17: Jscript_Projection_MethodCallStart

#
Channel
Application
Task
Jscript_Projection_MethodCall
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString
MethodName UnicodeString

Event ID 18: Jscript_Projection_MethodCallStop

#
Channel
Application
Task
Jscript_Projection_MethodCall
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString
MethodName UnicodeString

Event ID 19: Jscript_Projection_RawMethodCallStart

#
Channel
Application
Task
Jscript_Projection_RawMethodCall
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString
MethodName UnicodeString

Event ID 20: Jscript_Projection_RawMethodCallStop

#
Channel
Application
Task
Jscript_Projection_RawMethodCall
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString
MethodName UnicodeString

Event ID 21: Jscript_Projection_InvokesJsDelegateStart

#
Channel
Application
Task
Jscript_Projection_InvokesJsDelegate
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString
MethodName UnicodeString

Event ID 22: Jscript_Projection_InvokesJsDelegateStop

#
Channel
Application
Task
Jscript_Projection_InvokesJsDelegate
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString
MethodName UnicodeString

Event ID 23: Jscript_Projection_InvokeNativeDelegateStart

#
Channel
Application
Task
Jscript_Projection_InvokeNativeDelegate
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString
MethodName UnicodeString

Event ID 24: Jscript_Projection_InvokeNativeDelegateStop

#
Channel
Application
Task
Jscript_Projection_InvokeNativeDelegate
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString
MethodName UnicodeString

Event ID 25: Jscript_Projection_AddEventListenerStart

#
Channel
Application
Task
Jscript_Projection_AddEventListener
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString
MethodName UnicodeString

Event ID 26: Jscript_Projection_AddEventListenerStop

#
Channel
Application
Task
Jscript_Projection_AddEventListener
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString
MethodName UnicodeString

Event ID 27: Jscript_Projection_RemoveEventListenerStart

#
Channel
Application
Task
Jscript_Projection_RemoveEventListener
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString
MethodName UnicodeString

Event ID 28: Jscript_Projection_RemoveEventListenerStop

#
Channel
Application
Task
Jscript_Projection_RemoveEventListener
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString
MethodName UnicodeString

Event ID 29: Jscript_Projection_GetTypeMetaDataInformationStart

#
Channel
Application
Task
Jscript_Projection_GetTypeMetaDataInformation
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 30: Jscript_Projection_GetTypeMetaDataInformationStop

#
Channel
Application
Task
Jscript_Projection_GetTypeMetaDataInformation
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 31: Jscript_Projection_SetEventHandlerStart

#
Channel
Application
Task
Jscript_Projection_SetEventHandler
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString
EventName UnicodeString

Event ID 32: Jscript_Projection_SetEventHandlerStop

#
Channel
Application
Task
Jscript_Projection_SetEventHandler
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString
EventName UnicodeString

Event ID 33: Jscript_Projection_RemoveAllEventsAndEventHandlersStart

#
Channel
Application
Task
Jscript_Projection_RemoveAllEventsAndEventHandlers
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 34: Jscript_Projection_RemoveAllEventsAndEventHandlersStop

#
Channel
Application
Task
Jscript_Projection_RemoveAllEventsAndEventHandlers
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 35: Jscript_Projection_InvokeEventStart

#
Channel
Application
Task
Jscript_Projection_InvokeEvent
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString
EventName UnicodeString

Event ID 36: Jscript_Projection_InvokeEventStop

#
Channel
Application
Task
Jscript_Projection_InvokeEvent
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString
EventName UnicodeString

Event ID 37: Jscript_Projection_InvokeEventEvParamPrepStart

#
Channel
Application
Task
Jscript_Projection_InvokeEventEvParamPrep
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString
EventName UnicodeString

Event ID 38: Jscript_Projection_InvokeEventEvParamPrepStop

#
Channel
Application
Task
Jscript_Projection_InvokeEventEvParamPrep
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString
EventName UnicodeString

Event ID 39: ScriptContextRundownSourceDCStart

#
Channel
Application
Level
Informational
Task
ScriptContextRundown
Opcode
SourceDCStart

Fields #

NameDescription
SourceID UInt64
ScriptContextID Pointer
SourceFlags UInt32
Url UnicodeString

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 39,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 1612
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 12,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:15:44.240Z",
    "version": 0
  },
  "event_data": {
    "ScriptContextID": "0x21C4686BF60",
    "SourceFlags": 0,
    "SourceID": 0,
    "Url": "https://inputsuggestions.msdxcdn.microsoft.com/_version_/node_modules/knockout/build/output/knockout-latest.js"
  },
  "message": ""
}

Event ID 40: ScriptContextRundownSourceDCEnd

#
Channel
Application
Level
Informational
Task
ScriptContextRundown
Opcode
SourceDCEnd

Fields #

NameDescription
SourceID UInt64
ScriptContextID Pointer
SourceFlags UInt32
Url UnicodeString

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 40,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 1612
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 13,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:15:44.265Z",
    "version": 0
  },
  "event_data": {
    "ScriptContextID": "0x21C4686BF60",
    "SourceFlags": 0,
    "SourceID": 0,
    "Url": "https://inputsuggestions.msdxcdn.microsoft.com/_version_/node_modules/knockout/build/output/knockout-latest.js"
  },
  "message": ""
}

Event ID 41: ScriptContextRuntimeSourceLoad

#
Channel
Application
Task
ScriptContextRuntime
Opcode
SourceLoad

Fields #

NameDescription
SourceID UInt64
ScriptContextID Pointer
SourceFlags UInt32
Url UnicodeString

Event ID 42: ScriptContextRuntimeSourceUnload

#
Channel
Application
Task
ScriptContextRuntime
Opcode
SourceUnload

Fields #

NameDescription
SourceID UInt64
ScriptContextID Pointer
SourceFlags UInt32
Url UnicodeString

Event ID 43: Jscript_Projection_GetExprFromConcreteTypeNameStart

#
Channel
Application
Task
Jscript_Projection_GetExprFromConcreteTypeName
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 44: Jscript_Projection_GetExprFromConcreteTypeNameStop

#
Channel
Application
Task
Jscript_Projection_GetExprFromConcreteTypeName
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 45: Jscript_Projection_GetTypeFromTypeNamePartsStart

#
Channel
Application
Task
Jscript_Projection_GetTypeFromTypeNameParts
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 46: Jscript_Projection_GetTypeFromTypeNamePartsStop

#
Channel
Application
Task
Jscript_Projection_GetTypeFromTypeNameParts
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 47: Jscript_Projection_ReferenceOrArrayGetValueStart

#
Channel
Application
Task
Jscript_Projection_ReferenceOrArrayGetValue
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 48: Jscript_Projection_ReferenceOrArrayGetValueStop

#
Channel
Application
Task
Jscript_Projection_ReferenceOrArrayGetValue
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 49: Jscript_Projection_PropertyValueVarFromGRCNStart

#
Channel
Application
Task
Jscript_Projection_PropertyValueVarFromGRCN
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 50: Jscript_Projection_PropertyValueVarFromGRCNStop

#
Channel
Application
Task
Jscript_Projection_PropertyValueVarFromGRCN
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 51: Jscript_Projection_VarFromGRCNStart

#
Channel
Application
Task
Jscript_Projection_VarFromGRCN
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 52: Jscript_Projection_VarFromGRCNStop

#
Channel
Application
Task
Jscript_Projection_VarFromGRCN
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 53: Jscript_Projection_WriteIReferenceStart

#
Channel
Application
Task
Jscript_Projection_WriteIReference
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 54: Jscript_Projection_WriteIReferenceStop

#
Channel
Application
Task
Jscript_Projection_WriteIReference
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 55: Jscript_Projection_WriteInspectableStart

#
Channel
Application
Task
Jscript_Projection_WriteInspectable
Opcode
Start

Fields #

NameDescription
IsBoxed Boolean

Event ID 56: Jscript_Projection_WriteInspectableStop

#
Channel
Application
Task
Jscript_Projection_WriteInspectable
Opcode
Stop

Fields #

NameDescription
IsBoxed Boolean

Event ID 57: Jscript_Projection_GetNonArrayTypeAsPropertyValueStart

#
Channel
Application
Task
Jscript_Projection_GetNonArrayTypeAsPropertyValue
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 58: Jscript_Projection_GetNonArrayTypeAsPropertyValueStop

#
Channel
Application
Task
Jscript_Projection_GetNonArrayTypeAsPropertyValue
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 59: Jscript_Projection_GetNonArrayBasicTypeAsPropertyValueStart

#
Channel
Application
Task
Jscript_Projection_GetNonArrayBasicTypeAsPropertyValue
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 60: Jscript_Projection_GetNonArrayBasicTypeAsPropertyValueStop

#
Channel
Application
Task
Jscript_Projection_GetNonArrayBasicTypeAsPropertyValue
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 61: Jscript_Projection_GetTypedArrayAsPropertyValueStart

#
Channel
Application
Task
Jscript_Projection_GetTypedArrayAsPropertyValue
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 62: Jscript_Projection_GetTypedArrayAsPropertyValueStop

#
Channel
Application
Task
Jscript_Projection_GetTypedArrayAsPropertyValue
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 63: Jscript_Projection_GetBasicTypedArrayAsPropertyValueStart

#
Channel
Application
Task
Jscript_Projection_GetBasicTypedArrayAsPropertyValue
Opcode
Start

Fields #

NameDescription
TypeName UnicodeString

Event ID 64: Jscript_Projection_GetBasicTypedArrayAsPropertyValueStop

#
Channel
Application
Task
Jscript_Projection_GetBasicTypedArrayAsPropertyValue
Opcode
Stop

Fields #

NameDescription
TypeName UnicodeString

Event ID 65: ParseMethodStart

#
Channel
Application
Task
ParseMethod
Opcode
Start

Fields #

NameDescription
SourceID UInt64
ScriptContextID Pointer
MethodID UInt32
ASTSize UInt32
IsDeferred Boolean
MethodName UnicodeString

Event ID 66: ParseMethodStop

#
Channel
Application
Task
ParseMethod
Opcode
Stop

Fields #

NameDescription
SourceID UInt64
ScriptContextID Pointer
MethodID UInt32
ASTSize UInt32
IsDeferred Boolean
MethodName UnicodeString

Event ID 67: GenerateBytecodeMethod

#
Channel
Application
Task
GenerateBytecodeMethod

Fields #

NameDescription
SourceID UInt64
ScriptContextID Pointer
MethodID UInt32
BytecodeCount UInt32
BytecodeSize UInt32
MethodName UnicodeString

Event ID 68: Jscript_GC_ResetMarksStart

#
Channel
Application
Task
Jscript_GC_ResetMarks
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 69: Jscript_GC_ResetMarksStop

#
Channel
Application
Task
Jscript_GC_ResetMarks
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 70: Jscript_GC_ScanRootsStart

#
Channel
Application
Task
Jscript_GC_ScanRoots
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 71: Jscript_GC_ScanRootsStop

#
Channel
Application
Task
Jscript_GC_ScanRoots
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 72: Jscript_GC_ScanStackStart

#
Channel
Application
Task
Jscript_GC_ScanStack
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 73: Jscript_GC_ScanStackStop

#
Channel
Application
Task
Jscript_GC_ScanStack
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 74: Jscript_GC_MarkStart

#
Channel
Application
Task
Jscript_GC_Mark
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 75: Jscript_GC_MarkStop

#
Channel
Application
Task
Jscript_GC_Mark
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 76: Jscript_GC_RescanStart

#
Channel
Application
Task
Jscript_GC_Rescan
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 77: Jscript_GC_RescanStop

#
Channel
Application
Task
Jscript_GC_Rescan
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 78: Jscript_GC_SweepStart

#
Channel
Application
Task
Jscript_GC_Sweep
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 79: Jscript_GC_SweepStop

#
Channel
Application
Task
Jscript_GC_Sweep
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
SweptBytes UInt32

Event ID 80: Jscript_GC_SetupBackgroundSweepStart

#
Channel
Application
Task
Jscript_GC_SetupBackgroundSweep
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 81: Jscript_GC_SetupBackgroundSweepStop

#
Channel
Application
Task
Jscript_GC_SetupBackgroundSweep
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 82: Jscript_GC_BackgroundSweepStart

#
Channel
Application
Task
Jscript_GC_BackgroundSweep
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 83: Jscript_GC_BackgroundSweepStop

#
Channel
Application
Task
Jscript_GC_BackgroundSweep
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
SweptBytes UInt32

Event ID 84: Jscript_GC_TransferSweptObjectsStart

#
Channel
Application
Task
Jscript_GC_TransferSweptObjects
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 85: Jscript_GC_TransferSweptObjectsStop

#
Channel
Application
Task
Jscript_GC_TransferSweptObjects
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 86: Jscript_GC_DisposeStart

#
Channel
Application
Task
Jscript_GC_Dispose
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 87: Jscript_GC_DisposeStop

#
Channel
Application
Task
Jscript_GC_Dispose
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
SweptBytes UInt32

Event ID 88: Jscript_GC_BackgroundMarkStart

#
Channel
Application
Task
Jscript_GC_BackgroundMark
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Event ID 89: Jscript_GC_BackgroundMarkStop

#
Channel
Application
Task
Jscript_GC_BackgroundMark
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Event ID 90: Jscript_GC_ResetWriteWatchStart

#
Channel
Application
Task
Jscript_GC_ResetWriteWatch
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 91: Jscript_GC_ResetWriteWatchStop

#
Channel
Application
Task
Jscript_GC_ResetWriteWatch
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 92: Jscript_Profile_PersistenceSave

#
Channel
Application
Task
Jscript_Profile_Persistence
Opcode
Save

Fields #

NameDescription
SourceID UInt64
ScriptContextID Pointer
Size UInt32
IsSaveOnClose Boolean

Event ID 93: ScriptContextRuntimeScriptContextOnStartupComplete

#
Channel
Application
Task
ScriptContextRuntime
Opcode
ScriptContextOnStartupComplete

Fields #

NameDescription
ScriptContextID Pointer

Event ID 94: Jscript_Profile_PersistenceLoad

#
Channel
Application
Task
Jscript_Profile_Persistence
Opcode
Load

Fields #

NameDescription
SourceID UInt64
ScriptContextID Pointer

Event ID 95: Jscript_Backend_Inline

#
Channel
Application
Task
Jscript_Backend_Inline

Fields #

NameDescription
CallerMethodID UInt32
InlineeMethodID UInt32
Caller UnicodeString
Inlinee UnicodeString

Event ID 96: Jscript_Method_JitStart_45_17

#
Channel
Application
Task
Jscript_Method_Jit
Opcode
Start_45_17

Fields #

NameDescription
MethodID UInt32
MethodName UnicodeString
ScriptContext Pointer
InterpretedCount UInt32
SourceCodeSize UInt32
ByteCodeSize UInt32
ByteCodeInLoopSize UInt32
JitLevel UInt16

Event ID 97: Jscript_Method_JitStop_45_18

#
Channel
Application
Task
Jscript_Method_Jit
Opcode
Stop_45_18

Fields #

NameDescription
MethodID UInt32
MethodName UnicodeString
ScriptContext Pointer
InterpretedCount UInt32
MethodStartAddress Pointer
MethodSize UInt64

Event ID 98: Jscript_Method_JitQueue

#
Channel
Application
Task
Jscript_Method_Jit
Opcode
Queue

Fields #

NameDescription
MethodID UInt32
MethodName UnicodeString
ScriptContext Pointer
InterpretedCount UInt32

Event ID 99: Jscript_Method_JitDequeue

#
Channel
Application
Task
Jscript_Method_Jit
Opcode
Dequeue

Fields #

NameDescription
MethodID UInt32
MethodName UnicodeString
ScriptContext Pointer
InterpretedCount UInt32

Event ID 100: Jscript_GC_IdleCollectStart

#
Channel
Application
Task
Jscript_GC_IdleCollect
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 101: Jscript_GC_IdleCollect

#
Channel
Application
Task
Jscript_GC_IdleCollect

Fields #

NameDescription
RecyclerID Pointer

Event ID 102: Jscript_GC_IdleCollect102

#
Channel
Application
Task
Jscript_GC_IdleCollect

Fields #

NameDescription
RecyclerID Pointer

Event ID 103: Jscript_GC_IdleCollect103

#
Channel
Application
Task
Jscript_GC_IdleCollect

Fields #

NameDescription
RecyclerID Pointer

Event ID 104: Jscript_GC_IdleCollectStop

#
Channel
Application
Task
Jscript_GC_IdleCollect
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 105: Jscript_Page_Allocator_SizeUsedPageSize

#
Channel
Application
Level
4
Task
Jscript_Page_Allocator_Size
Opcode
UsedPageSize

Fields #

NameDescription
SizeInBytes UInt64

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 105,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 10,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:16:03.942Z",
    "version": 0
  },
  "event_data": {
    "SizeInBytes": 30175232
  },
  "message": ""
}

Event ID 106: Jscript_Recycler_AllocationFree_Memory

#
Channel
Application
Level
Informational
Task
Jscript_Recycler_Allocation
Opcode
Free_Memory

Fields #

NameDescription
Count UInt32
Values AnsiString

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 106,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 10,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.345Z",
    "version": 0
  },
  "event_data": {
    "Count": 400,
    "Values": "\u0010p\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 p\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000p\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000Pp\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`p\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000pp\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000p\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000p\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000p\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000p\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000q\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010q\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 q\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000q\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@q\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`q\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000pq\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000q\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000q\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000q\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000q\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000q\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000q\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000r\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010r\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 r\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000r\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@r\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000Pr\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`r\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000pr\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000r\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000r\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000r\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000r\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000r\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000r\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010s\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 s\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000s\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000Ps\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000ps\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000s\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000s\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000s\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000s\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000s\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000s\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000s\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000s\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000t\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010t\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 t\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000t\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@t\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000Pt\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`t\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000pt\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000t\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000t\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000t\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000t\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000t\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000t\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000u\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010u\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000u\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@u\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000Pu\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000pu\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000u\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000u\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000u\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000u\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000u\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000u\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000v\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010v\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000v\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@v\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000Pv\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000pv\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000v\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000v\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000v\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000v\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000v\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000v\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000w\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010w\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000w\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000w\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000w\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000w\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000Px\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000px\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000x\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000Py\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000py\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000y\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000Pz\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000pz\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000z\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 {\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000P{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000p{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000{\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 |\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000P|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000p|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000|\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 }\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000P}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000p}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000}\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 ~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000P~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000p~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000~\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 \\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000P\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000p\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\\\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 @F\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000@F\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@@F\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`@F\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@F\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@F\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@F\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@F\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000AF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010AF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 AF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000AF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@AF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000PAF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000pAF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000AF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000AF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000AF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000AF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000AF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000AF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000BF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010BF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000BF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@BF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`BF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000pBF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000BF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000BF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000BF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000BF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000BF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000CF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 CF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000CF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000PCF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`CF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000CF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000CF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000CF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000CF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000CF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000CF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010DF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 DF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@DF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000PDF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000pDF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000DF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000DF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000DF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000DF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000DF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000PEF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000pEF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000EF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000FF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010FF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000 FF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u00000FF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000@FF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000PFF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000`FF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000pFF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000FF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000FF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000FF\u001c\u0002\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000FF\u001c\u0002\u0000\u0000\u0010"
  },
  "message": ""
}

Event ID 107: Jscript_Recycler_AllocationFree_Memory_Block

#
Channel
Application
Level
Informational
Task
Jscript_Recycler_Allocation
Opcode
Free_Memory_Block

Fields #

NameDescription
MemoryAddress Pointer
BlockSize UInt32
ObjectSize UInt32

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 107,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 11,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.344Z",
    "version": 0
  },
  "event_data": {
    "BlockSize": 12288,
    "MemoryAddress": "0x21C4849B000",
    "ObjectSize": 12288
  },
  "message": ""
}

Event ID 108: Jscript_Recycler_AllocationAllocate_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_Object

Fields #

NameDescription
MemoryAddress Pointer

Event ID 109: Jscript_Recycler_AllocationAllocate_Array

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_Array

Fields #

NameDescription
MemoryAddress Pointer

Event ID 110: Jscript_Recycler_AllocationAllocate_Function

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_Function

Fields #

NameDescription
MemoryAddress Pointer
MethodID UInt32

Event ID 111: Jscript_Recycler_AllocationAllocate_DOM_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_DOM_Object

Fields #

NameDescription
MemoryAddress Pointer
TypeId UInt32

Event ID 112: Jscript_Recycler_AllocationAllocate_WinRT_JSProxy_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_WinRT_JSProxy_Object

Fields #

NameDescription
MemoryAddress Pointer
TypeName UnicodeString

Event ID 113: Jscript_Recycler_AllocationAllocate_PixelArray

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_PixelArray

Fields #

NameDescription
MemoryAddress Pointer

Event ID 114: Jscript_Recycler_AllocationExternal_AddRef

#
Channel
Application
Level
Informational
Task
Jscript_Recycler_Allocation
Opcode
External_AddRef

Fields #

NameDescription
MemoryAddress Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 114,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 18,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:16:03.942Z",
    "version": 0
  },
  "event_data": {
    "MemoryAddress": "0x21C5BFBB4E0"
  },
  "message": ""
}

Event ID 115: Jscript_Recycler_AllocationExternal_Release

#
Channel
Application
Level
Informational
Task
Jscript_Recycler_Allocation
Opcode
External_Release

Fields #

NameDescription
MemoryAddress Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 115,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 19,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:16:03.942Z",
    "version": 0
  },
  "event_data": {
    "MemoryAddress": "0x21C5BFBB4E0"
  },
  "message": ""
}

Event ID 116: Jscript_Recycler_AllocationAllocate_WinRT_RuntimeClass_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_WinRT_RuntimeClass_Object

Fields #

NameDescription
MemoryAddress Pointer
TypeName UnicodeString

Event ID 117: Jscript_Recycler_AllocationAllocate_WinRT_Namespace_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_WinRT_Namespace_Object

Fields #

NameDescription
MemoryAddress Pointer
TypeName UnicodeString

Event ID 118: Jscript_Recycler_AllocationAllocate_WinRT_Struct_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_WinRT_Struct_Object

Fields #

NameDescription
MemoryAddress Pointer
TypeName UnicodeString

Event ID 119: Jscript_Recycler_AllocationAllocate_WinRT_Enum_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_WinRT_Enum_Object

Fields #

NameDescription
MemoryAddress Pointer
TypeName UnicodeString

Event ID 120: Jscript_Recycler_AllocationAllocate_WinRT_TypedArray_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_WinRT_TypedArray_Object

Fields #

NameDescription
MemoryAddress Pointer
TypeName UnicodeString

Event ID 121: Jscript_Recycler_AllocationAllocate_WinRT_Delegate_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_WinRT_Delegate_Object

Fields #

NameDescription
MemoryAddress Pointer
TypeName UnicodeString
jsVar Pointer

Event ID 122: Jscript_Recycler_AllocationAllocate_WinRT_EventHandler_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_WinRT_EventHandler_Object

Fields #

NameDescription
MemoryAddress Pointer
TypeName UnicodeString
callback Pointer
EventName UnicodeString

Event ID 123: Jscript_Recycler_AllocationAllocate_WinRT_Collections_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_WinRT_Collections_Object

Fields #

NameDescription
MemoryAddress Pointer
TypeName UnicodeString
jsVar Pointer

Event ID 124: Jscript_Recycler_AllocationAllocate_WinRT_PropertyValue_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Allocate_WinRT_PropertyValue_Object

Fields #

NameDescription
MemoryAddress Pointer
TypeName UnicodeString
IsArray Boolean

Event ID 125: Jscript_Recycler_AllocationFree_WinRT_Delegate_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Free_WinRT_Delegate_Object

Fields #

NameDescription
MemoryAddress Pointer

Event ID 126: Jscript_Recycler_AllocationFree_WinRT_EventHandler_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Free_WinRT_EventHandler_Object

Fields #

NameDescription
MemoryAddress Pointer

Event ID 127: Jscript_Recycler_AllocationFree_WinRT_Collections_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Free_WinRT_Collections_Object

Fields #

NameDescription
MemoryAddress Pointer

Event ID 128: Jscript_Recycler_AllocationFree_WinRT_PropertyValue_Object

#
Channel
Application
Task
Jscript_Recycler_Allocation
Opcode
Free_WinRT_PropertyValue_Object

Fields #

NameDescription
MemoryAddress Pointer

Event ID 129: Jscript_GC_SweepWeakRefStart

#
Channel
Application
Task
Jscript_GC_SweepWeakRef
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 130: Jscript_GC_SweepWeakRefStop

#
Channel
Application
Task
Jscript_GC_SweepWeakRef
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 131: Jscript_GC_ProcessTrackedObjectStart

#
Channel
Application
Task
Jscript_GC_ProcessTrackedObject
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 132: Jscript_GC_ProcessTrackedObjectStop

#
Channel
Application
Task
Jscript_GC_ProcessTrackedObject
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 133: Jscript_GC_ProcessClientTrackedObjectStart

#
Channel
Application
Task
Jscript_GC_ProcessClientTrackedObject
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 134: Jscript_GC_ProcessClientTrackedObjectStop

#
Channel
Application
Task
Jscript_GC_ProcessClientTrackedObject
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 135: Jscript_GC_BackgroundZeroPageStart

#
Channel
Application
Task
Jscript_GC_BackgroundZeroPage
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 136: Jscript_GC_BackgroundZeroPageStop

#
Channel
Application
Task
Jscript_GC_BackgroundZeroPage
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 137: Jscript_GC_FlushZeroPageStart

#
Channel
Application
Task
Jscript_GC_FlushZeroPage
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 138: Jscript_GC_FlushZeroPageStop

#
Channel
Application
Task
Jscript_GC_FlushZeroPage
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 139: Jscript_GC_DecommitConcurrentCollectPageAllocatorStart

#
Channel
Application
Task
Jscript_GC_DecommitConcurrentCollectPageAllocator
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 140: Jscript_GC_DecommitConcurrentCollectPageAllocatorStop

#
Channel
Application
Task
Jscript_GC_DecommitConcurrentCollectPageAllocator
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 141: Jscript_GC_SweepPartialReusePageStart

#
Channel
Application
Task
Jscript_GC_SweepPartialReusePage
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 142: Jscript_GC_SweepPartialReusePageStop

#
Channel
Application
Task
Jscript_GC_SweepPartialReusePage
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 143: Jscript_GC_BackgroundRescanStart

#
Channel
Application
Task
Jscript_GC_BackgroundRescan
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Event ID 144: Jscript_GC_BackgroundRescanStop

#
Channel
Application
Task
Jscript_GC_BackgroundRescan
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Event ID 145: Jscript_GC_BackgroundResetWriteWatchStart

#
Channel
Application
Task
Jscript_GC_BackgroundResetWriteWatch
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Event ID 146: Jscript_GC_BackgroundResetWriteWatchStop

#
Channel
Application
Task
Jscript_GC_BackgroundResetWriteWatch
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Event ID 147: Jscript_GC_BackgroundScanRootsStart

#
Channel
Application
Task
Jscript_GC_BackgroundScanRoots
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 148: Jscript_GC_BackgroundScanRootsStop

#
Channel
Application
Task
Jscript_GC_BackgroundScanRoots
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 149: Jscript_GC_BackgroundResetMarksStart

#
Channel
Application
Task
Jscript_GC_BackgroundResetMarks
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 150: Jscript_GC_BackgroundResetMarksStop

#
Channel
Application
Task
Jscript_GC_BackgroundResetMarks
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 151: Jscript_GC_RescanMarkWaitStart

#
Channel
Application
Task
Jscript_GC_RescanMarkWait
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
Timeout UInt32

Event ID 152: Jscript_GC_RescanMarkWaitStop

#
Channel
Application
Task
Jscript_GC_RescanMarkWait
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
HasTimedout Boolean

Event ID 153: Jscript_GC_SynchronousMarkWaitStart

#
Channel
Application
Task
Jscript_GC_SynchronousMarkWait
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
Timeout UInt32

Event ID 154: Jscript_GC_SynchronousMarkWaitStop

#
Channel
Application
Task
Jscript_GC_SynchronousMarkWait
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
HasTimedout Boolean

Event ID 155: Jscript_GC_FinishConcurrentWaitStart

#
Channel
Application
Task
Jscript_GC_FinishConcurrentWait
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
Timeout UInt32

Event ID 156: Jscript_GC_FinishConcurrentWaitStop

#
Channel
Application
Task
Jscript_GC_FinishConcurrentWait
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
HasTimedout Boolean

Event ID 157: Jscript_GC_EndMarkOnLowMemoryStart

#
Channel
Application
Task
Jscript_GC_EndMarkOnLowMemory
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 158: Jscript_GC_EndMarkOnLowMemoryStop

#
Channel
Application
Task
Jscript_GC_EndMarkOnLowMemory
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 159: Jscript_AsyncCausality_StackTrace

#
Channel
Application
Task
Jscript_AsyncCausality_StackTrace

Fields #

NameDescription
AsyncOperationId UInt64
FrameCount UInt16
NameBufferCount UInt16
NameBuffer UnicodeString
Frames Int16

Event ID 160: JScript_ByteCodeDeserializeStart

#
Channel
Application
Task
JScript_ByteCodeDeserialize
Opcode
Start

Fields #

NameDescription
Element Pointer
Zero UInt32

Event ID 161: JScript_ByteCodeDeserializeStop

#
Channel
Application
Task
JScript_ByteCodeDeserialize
Opcode
Stop

Fields #

NameDescription
Element Pointer
Zero UInt32

Event ID 162: Jscript_Hosting_BinaryInconsistency

#
Channel
Application
Task
Jscript_Hosting_BinaryInconsistency

Fields #

NameDescription
Jscript9EngineSize UInt32
MshtmlEngineSize UInt32
Jscript9ContextSize UInt32
MshtmlContextSize UInt32
Jscript9LibrarySize UInt32
MshtmlLibrarySize UInt32
Jscript9CEOSize UInt32
MshtmlCEOSize UInt32
Jscript9ScriptEngineOffset UInt32
MshtmlScriptEngineOffset UInt32
Jscript9ScriptContextOffset UInt32
MshtmlScriptContextOffset UInt32
Jscript9LibraryOffset UInt32
MshtmlLibraryOffset UInt32
Jscript9TypeOffset UInt32
MshtmlTypeOffset UInt32
Jscript9TypeIdOffset UInt32
MshtmlTypeIdOffset UInt32
Jscript9TaggedIntSize UInt32
MshtmlTaggIntSize UInt32
Jscript9NumberSize UInt32
MshtmlNumberSize UInt32
Jscript9TypeIdLimit UInt32
MshtmlTypeIdLimit UInt32
JScript9NumberUtilitiesSize UInt32
MsHtmlNumberUtilitiesSize UInt32
JScript9NumberUtilitiesOffset UInt32
MsHtmlNumberUtilitiesOffset UInt32

Event ID 163: Jscript_Hosting_BinaryConsistencyInfo

#
Channel
Application
Task
Jscript_Hosting_BinaryConsistencyInfo

Fields #

NameDescription
MshtmlEngineSize UInt32
MshtmlContextSize UInt32
MshtmlLibrarySize UInt32
MshtmlCEOSize UInt32
MshtmlScriptEngineOffset UInt32
MshtmlScriptContextOffset UInt32
MshtmlLibraryOffset UInt32
MshtmlTypeOffset UInt32
MshtmlTypeIdOffset UInt32
MshtmlTaggIntSize UInt32
MshtmlNumberSize UInt32
MshtmlTypeIdLimit UInt32
MsHtmlNumberUtilitiesSize UInt32
MsHtmlNumberUtilitiesOffset UInt32

Event ID 164: Jscript_StackTrace

#
Channel
Application
Task
Jscript_StackTrace

Fields #

NameDescription
OperationId UInt64
FrameCount UInt16
FrameNameBufferCount UInt32
FrameNameBuffer UnicodeString
Frames Int16

Event ID 165: Jscript_AsyncCausality_StackTrace165

#
Channel
Application
Task
Jscript_AsyncCausality_StackTrace

Fields #

NameDescription
OperationId UInt64
FrameCount UInt16
FrameNameBufferCount UInt32
FrameNameBuffer UnicodeString
Frames Int16

Event ID 166: Jscript_Host_Native

#
Channel
Application
Task
Jscript_Host_Native

Fields #

NameDescription
ModuleID Pointer
SHA1Hash Binary
Url UnicodeString
ModuleSize HexInt32

Event ID 167: Jscript_Host_Native167

#
Channel
Application
Task
Jscript_Host_Native

Fields #

NameDescription
ModuleID Pointer
SerializationIndex HexInt32
Name UnicodeString
FunctionOffset HexInt32
FunctionSize HexInt32

Event ID 168: Jscript_SourceMapping

#
Channel
Application
Task
Jscript_SourceMapping

Fields #

NameDescription
ReasonBuffer UnicodeString
SourceRequestFor UInt16

Event ID 169: Jscript_GC_ParallelMarkStart

#
Channel
Application
Task
Jscript_GC_ParallelMark
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 170: Jscript_GC_ParallelMarkStop

#
Channel
Application
Task
Jscript_GC_ParallelMark
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 171: Jscript_GC_BackgroundParallelMarkStart

#
Channel
Application
Task
Jscript_GC_BackgroundParallelMark
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Event ID 172: Jscript_GC_BackgroundParallelMarkStop

#
Channel
Application
Task
Jscript_GC_BackgroundParallelMark
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Event ID 173: Memprotect_GC_ResetMarksStart

#
Channel
Application
Task
Memprotect_GC_ResetMarks
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 174: Memprotect_GC_ResetMarksStop

#
Channel
Application
Task
Memprotect_GC_ResetMarks
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 175: Memprotect_GC_ScanRootsStart

#
Channel
Application
Level
4
Task
Memprotect_GC_ScanRoots
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 175,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.342Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 176: Memprotect_GC_ScanRootsStop

#
Channel
Application
Level
4
Task
Memprotect_GC_ScanRoots
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 176,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.343Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 177: Memprotect_GC_ScanStackStart

#
Channel
Application
Task
Memprotect_GC_ScanStack
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 178: Memprotect_GC_ScanStackStop

#
Channel
Application
Task
Memprotect_GC_ScanStack
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 179: Memprotect_GC_MarkStart

#
Channel
Application
Level
4
Task
Memprotect_GC_Mark
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 179,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.343Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 180: Memprotect_GC_MarkStop

#
Channel
Application
Level
4
Task
Memprotect_GC_Mark
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 180,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.343Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 181: Memprotect_GC_RescanStart

#
Channel
Application
Task
Memprotect_GC_Rescan
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 182: Memprotect_GC_RescanStop

#
Channel
Application
Task
Memprotect_GC_Rescan
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 183: Memprotect_GC_SweepStart

#
Channel
Application
Task
Memprotect_GC_Sweep
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 184: Memprotect_GC_SweepStop

#
Channel
Application
Task
Memprotect_GC_Sweep
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
SweptBytes UInt32

Event ID 185: Memprotect_GC_SetupBackgroundSweepStart

#
Channel
Application
Level
4
Task
Memprotect_GC_SetupBackgroundSweep
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 185,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.344Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 186: Memprotect_GC_SetupBackgroundSweepStop

#
Channel
Application
Level
4
Task
Memprotect_GC_SetupBackgroundSweep
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 186,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.344Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 187: Memprotect_GC_BackgroundSweepStart

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundSweep
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 187,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.344Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 188: Memprotect_GC_BackgroundSweepStop

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundSweep
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
SweptBytes UInt32

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 188,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.346Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270",
    "SweptBytes": 0
  },
  "message": ""
}

Event ID 189: Memprotect_GC_TransferSweptObjectsStart

#
Channel
Application
Level
4
Task
Memprotect_GC_TransferSweptObjects
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 189,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.358Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 190: Memprotect_GC_TransferSweptObjectsStop

#
Channel
Application
Level
4
Task
Memprotect_GC_TransferSweptObjects
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 190,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.358Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 191: Memprotect_GC_DisposeStart

#
Channel
Application
Task
Memprotect_GC_Dispose
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 192: Memprotect_GC_DisposeStop

#
Channel
Application
Task
Memprotect_GC_Dispose
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
SweptBytes UInt32

Event ID 193: Memprotect_GC_BackgroundMarkStart

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundMark
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 193,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.269Z",
    "version": 0
  },
  "event_data": {
    "BackgroundMarkRescanCount": 1,
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 194: Memprotect_GC_BackgroundMarkStop

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundMark
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 194,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.270Z",
    "version": 0
  },
  "event_data": {
    "BackgroundMarkRescanCount": 1,
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 195: Memprotect_GC_ResetWriteWatchStart

#
Channel
Application
Task
Memprotect_GC_ResetWriteWatch
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 196: Memprotect_GC_ResetWriteWatchStop

#
Channel
Application
Task
Memprotect_GC_ResetWriteWatch
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 197: Memprotect_GC_IdleCollectStart

#
Channel
Application
Task
Memprotect_GC_IdleCollect
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 198: Memprotect_GC_IdleCollect

#
Channel
Application
Task
Memprotect_GC_IdleCollect

Fields #

NameDescription
RecyclerID Pointer

Event ID 199: Memprotect_GC_IdleCollect199

#
Channel
Application
Task
Memprotect_GC_IdleCollect

Fields #

NameDescription
RecyclerID Pointer

Event ID 200: Memprotect_GC_IdleCollect200

#
Channel
Application
Task
Memprotect_GC_IdleCollect

Fields #

NameDescription
RecyclerID Pointer

Event ID 201: Memprotect_GC_IdleCollectStop

#
Channel
Application
Task
Memprotect_GC_IdleCollect
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 202: Memprotect_GC_SweepWeakRefStart

#
Channel
Application
Level
4
Task
Memprotect_GC_SweepWeakRef
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 202,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.344Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 203: Memprotect_GC_SweepWeakRefStop

#
Channel
Application
Task
Memprotect_GC_SweepWeakRef
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 204: Memprotect_GC_ProcessTrackedObjectStart

#
Channel
Application
Level
4
Task
Memprotect_GC_ProcessTrackedObject
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 204,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:37:27.441Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 205: Memprotect_GC_ProcessTrackedObjectStop

#
Channel
Application
Level
4
Task
Memprotect_GC_ProcessTrackedObject
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 205,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:37:27.441Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 206: Memprotect_GC_ProcessClientTrackedObjectStart

#
Channel
Application
Level
4
Task
Memprotect_GC_ProcessClientTrackedObject
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 206,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.342Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 207: Memprotect_GC_ProcessClientTrackedObjectStop

#
Channel
Application
Level
4
Task
Memprotect_GC_ProcessClientTrackedObject
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 207,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.342Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 208: Memprotect_GC_BackgroundZeroPageStart

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundZeroPage
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 208,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.344Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 209: Memprotect_GC_BackgroundZeroPageStop

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundZeroPage
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 209,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.344Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 210: Memprotect_GC_FlushZeroPageStart

#
Channel
Application
Level
4
Task
Memprotect_GC_FlushZeroPage
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 210,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.358Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 211: Memprotect_GC_FlushZeroPageStop

#
Channel
Application
Level
4
Task
Memprotect_GC_FlushZeroPage
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 211,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.358Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 212: Memprotect_GC_DecommitConcurrentCollectPageAllocatorStart

#
Channel
Application
Level
4
Task
Memprotect_GC_DecommitConcurrentCollectPageAllocator
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 212,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.343Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 213: Memprotect_GC_DecommitConcurrentCollectPageAllocatorStop

#
Channel
Application
Level
4
Task
Memprotect_GC_DecommitConcurrentCollectPageAllocator
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 213,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.343Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 214: Memprotect_GC_SweepPartialReusePageStart

#
Channel
Application
Level
4
Task
Memprotect_GC_SweepPartialReusePage
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 214,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.345Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 215: Memprotect_GC_SweepPartialReusePageStop

#
Channel
Application
Level
4
Task
Memprotect_GC_SweepPartialReusePage
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 215,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.346Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 216: Memprotect_GC_BackgroundRescanStart

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundRescan
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 216,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.267Z",
    "version": 0
  },
  "event_data": {
    "BackgroundMarkRescanCount": 0,
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 217: Memprotect_GC_BackgroundRescanStop

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundRescan
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 217,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.269Z",
    "version": 0
  },
  "event_data": {
    "BackgroundMarkRescanCount": 0,
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 218: Memprotect_GC_BackgroundResetWriteWatchStart

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundResetWriteWatch
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 218,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:58.105Z",
    "version": 0
  },
  "event_data": {
    "BackgroundMarkRescanCount": -1,
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 219: Memprotect_GC_BackgroundResetWriteWatchStop

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundResetWriteWatch
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 219,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:58.105Z",
    "version": 0
  },
  "event_data": {
    "BackgroundMarkRescanCount": -1,
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 220: Memprotect_GC_BackgroundScanRootsStart

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundScanRoots
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 220,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.269Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 221: Memprotect_GC_BackgroundScanRootsStop

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundScanRoots
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 221,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.269Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 222: Memprotect_GC_BackgroundResetMarksStart

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundResetMarks
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 222,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:58.104Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 223: Memprotect_GC_BackgroundResetMarksStop

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundResetMarks
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 223,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:58.105Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 224: Memprotect_GC_RescanMarkWaitStart

#
Channel
Application
Level
4
Task
Memprotect_GC_RescanMarkWait
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
Timeout UInt32

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 224,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.342Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270",
    "Timeout": 15
  },
  "message": ""
}

Event ID 225: Memprotect_GC_RescanMarkWaitStop

#
Channel
Application
Level
4
Task
Memprotect_GC_RescanMarkWait
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
HasTimedout Boolean

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 225,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.342Z",
    "version": 0
  },
  "event_data": {
    "HasTimedout": false,
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 226: Memprotect_GC_SynchronousMarkWaitStart

#
Channel
Application
Task
Memprotect_GC_SynchronousMarkWait
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
Timeout UInt32

Event ID 227: Memprotect_GC_SynchronousMarkWaitStop

#
Channel
Application
Task
Memprotect_GC_SynchronousMarkWait
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
HasTimedout Boolean

Event ID 228: Memprotect_GC_FinishConcurrentWaitStart

#
Channel
Application
Level
4
Task
Memprotect_GC_FinishConcurrentWait
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
Timeout UInt32

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 228,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.341Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270",
    "Timeout": 1000
  },
  "message": ""
}

Event ID 229: Memprotect_GC_FinishConcurrentWaitStop

#
Channel
Application
Level
4
Task
Memprotect_GC_FinishConcurrentWait
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
HasTimedout Boolean

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 229,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.342Z",
    "version": 0
  },
  "event_data": {
    "HasTimedout": false,
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 230: Memprotect_GC_EndMarkOnLowMemoryStart

#
Channel
Application
Task
Memprotect_GC_EndMarkOnLowMemory
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 231: Memprotect_GC_EndMarkOnLowMemoryStop

#
Channel
Application
Task
Memprotect_GC_EndMarkOnLowMemory
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 232: Memprotect_GC_ParallelMarkStart

#
Channel
Application
Task
Memprotect_GC_ParallelMark
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 233: Memprotect_GC_ParallelMarkStop

#
Channel
Application
Task
Memprotect_GC_ParallelMark
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 234: Memprotect_GC_BackgroundParallelMarkStart

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundParallelMark
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 234,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:58.107Z",
    "version": 0
  },
  "event_data": {
    "BackgroundMarkRescanCount": 1,
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 235: Memprotect_GC_BackgroundParallelMarkStop

#
Channel
Application
Level
4
Task
Memprotect_GC_BackgroundParallelMark
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
BackgroundMarkRescanCount Int8

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 235,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:58.107Z",
    "version": 0
  },
  "event_data": {
    "BackgroundMarkRescanCount": 1,
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 236: Memprotect_GCStart

#
Channel
Application
Level
4
Task
Memprotect_GC
Opcode
Start

Fields #

NameDescription
Element Pointer
Zero UInt32

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 236,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.267Z",
    "version": 0
  },
  "event_data": {
    "Element": "0x21C46813270",
    "Zero": 15
  },
  "message": ""
}

Event ID 237: Memprotect_GCStop

#
Channel
Application
Level
4
Task
Memprotect_GC
Opcode
Stop

Fields #

NameDescription
Element Pointer
Zero UInt32

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 237,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.270Z",
    "version": 0
  },
  "event_data": {
    "Element": "0x21C46813270",
    "Zero": 15
  },
  "message": ""
}

Event ID 238: Memprotect_GC_Allocation

#
Channel
Application
Level
4
Task
Memprotect_GC_Allocation

Fields #

NameDescription
HeapHandle Pointer
Size UInt64
Address Pointer
Source UInt32

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 238,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:16:03.863Z",
    "version": 0
  },
  "event_data": {
    "Address": "0x21C5CC2CB20",
    "HeapHandle": "0x21C46813270",
    "Size": 32,
    "Source": 3
  },
  "message": ""
}

Event ID 239: Memprotect_GC_Unroot

#
Channel
Application
Level
4
Task
Memprotect_GC_Unroot

Fields #

NameDescription
HeapHandle Pointer
Address Pointer
Source UInt32

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 239,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:16:03.863Z",
    "version": 0
  },
  "event_data": {
    "Address": "0x21C5CC432C0",
    "HeapHandle": "0x21C46813270",
    "Source": 3
  },
  "message": ""
}

Event ID 240: Jscript_GC_Init

#
Channel
Application
Task
Jscript_GC_Init

Fields #

NameDescription
RecyclerID Pointer
Timestamp Double

Event ID 241: Memprotect_GC_Heap_Size

#
Channel
Application
Level
4
Task
Memprotect_GC_Heap_Size

Fields #

NameDescription
RecyclerID Pointer
UsedBytes UInt64
ReservedBytes UInt64
CommittedBytes UInt64
NumberOfSegments UInt64
FromGC Boolean

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 241,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-21 22:16:04.270Z",
    "version": 0
  },
  "event_data": {
    "CommittedBytes": 5148672,
    "FromGC": false,
    "NumberOfSegments": 18446744073709551578,
    "RecyclerID": "0x21C46813270",
    "ReservedBytes": 18446744073670623232,
    "UsedBytes": 5148672
  },
  "message": ""
}

Event ID 242: Jscript_Internal_Generic_Event

#
Channel
Application
Task
Jscript_Internal_Generic_Event

Fields #

NameDescription
eventData UnicodeString

Event ID 243: Jscript_GC_Bucket_Stats

#
Channel
Application
Task
Jscript_GC_Bucket_Stats

Fields #

NameDescription
RecyclerID Pointer
Type UInt16
SizeCat UInt16
UsedBytes UInt64
TotalBytes UInt64

Event ID 244: Memprotect_GC_Bucket_Stats

#
Channel
Application
Level
4
Task
Memprotect_GC_Bucket_Stats

Fields #

NameDescription
RecyclerID Pointer
Type UInt16
SizeCat UInt16
UsedBytes UInt64
TotalBytes UInt64

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 244,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 0,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.358Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813270",
    "SizeCat": 16,
    "TotalBytes": 77824,
    "Type": 0,
    "UsedBytes": 54800
  },
  "message": ""
}

Event ID 245: Jscript_Backend_Bailout

#
Channel
Application
Task
Jscript_Backend_Bailout

Fields #

NameDescription
FunctionMethodID UInt32
FunctionSourceID UInt32
FunctionDisplayName UnicodeString
BailoutKind UInt32
BailoutCount UInt32
CallCount UInt32
RejitReason AnsiString
Rethunk Boolean

Event ID 246: Jscript_Backend_Bailout_LoopBody

#
Channel
Application
Task
Jscript_Backend_Bailout_LoopBody

Fields #

NameDescription
FunctionMethodID UInt32
FunctionSourceID UInt32
FunctionDisplayName UnicodeString
LoopNumber UInt32
BailoutKind UInt32
RejitReason AnsiString

Event ID 247: Jscript_GC_Clear_InlineCacheStart

#
Channel
Application
Task
Jscript_GC_Clear_InlineCache
Opcode
Start

Event ID 248: Jscript_GC_Clear_InlineCacheStop

#
Channel
Application
Task
Jscript_GC_Clear_InlineCache
Opcode
Stop

Fields #

NameDescription
ThreadContextID Pointer
ScriptContextCount UInt32
AllocatedSize UInt32
PreClearFreeSize UInt32
FreeSize UInt32
PolyInlineCacheSize UInt32

Event ID 249: Jscript_GC_PreSweepCallbackStart

#
Channel
Application
Task
Jscript_GC_PreSweepCallback
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Event ID 250: Jscript_GC_PreSweepCallbackStop

#
Channel
Application
Task
Jscript_GC_PreSweepCallback
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Event ID 251: Memprotect_GC_PreSweepCallbackStart

#
Channel
Application
Level
4
Task
Memprotect_GC_PreSweepCallback
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 251,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.343Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813B90"
  },
  "message": ""
}

Event ID 252: Memprotect_GC_PreSweepCallbackStop

#
Channel
Application
Level
4
Task
Memprotect_GC_PreSweepCallback
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 252,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.343Z",
    "version": 0
  },
  "event_data": {
    "RecyclerID": "0x21C46813B90"
  },
  "message": ""
}

Event ID 253: Jscript_GC_SweepWeakRefStop253

#
Channel
Application
Task
Jscript_GC_SweepWeakRef
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
ScannedCount UInt32
ClearedCount UInt32
RegionScannedCount UInt32
RegionClearedCount UInt32

Event ID 254: Memprotect_GC_SweepWeakRefStop254

#
Channel
Application
Level
4
Task
Memprotect_GC_SweepWeakRef
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
ScannedCount UInt32
ClearedCount UInt32
RegionScannedCount UInt32
RegionClearedCount UInt32

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 254,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 7236
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.344Z",
    "version": 0
  },
  "event_data": {
    "ClearedCount": 0,
    "RecyclerID": "0x21C46813270",
    "RegionClearedCount": 0,
    "RegionScannedCount": 0,
    "ScannedCount": 0
  },
  "message": ""
}

Event ID 255: Jscript_GC2Start

#
Channel
Application
Task
Jscript_GC2
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
Phase UInt32
CollectionTrigger UInt32
CollectionStartFlags UInt32

Event ID 256: Jscript_GC2Stop

#
Channel
Application
Task
Jscript_GC2
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
Phase UInt32
CollectionTrigger UInt32
CollectionStartFlags UInt32

Event ID 257: Memprotect_GC2Start

#
Channel
Application
Level
4
Task
Memprotect_GC2
Opcode
Start

Fields #

NameDescription
RecyclerID Pointer
Phase UInt32
CollectionTrigger UInt32
CollectionStartFlags UInt32

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 257,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 1,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.267Z",
    "version": 0
  },
  "event_data": {
    "CollectionStartFlags": 402657280,
    "CollectionTrigger": 6,
    "Phase": 15,
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Event ID 258: Memprotect_GC2Stop

#
Channel
Application
Level
4
Task
Memprotect_GC2
Opcode
Stop

Fields #

NameDescription
RecyclerID Pointer
Phase UInt32
CollectionTrigger UInt32
CollectionStartFlags UInt32

Example Event #

{
  "system": {
    "channel": "Application",
    "computer": "10.2.10.21",
    "correlation": {},
    "event_id": 258,
    "event_record_id": 0,
    "event_source_name": "",
    "execution": {
      "process_id": 10004,
      "thread_id": 5300
    },
    "guid": "",
    "keywords": 0,
    "level": 4,
    "opcode": 2,
    "provider": "Microsoft-JScript",
    "security": {
      "user_id": ""
    },
    "task": 0,
    "time_created": "2026-07-22 05:36:27.270Z",
    "version": 0
  },
  "event_data": {
    "CollectionStartFlags": 402657280,
    "CollectionTrigger": 6,
    "Phase": 15,
    "RecyclerID": "0x21C46813270"
  },
  "message": ""
}

Provenance

ETW provider GUID {57277741-3638-4A4B-BDBA-0AC6E45DA56C}

Defined in Chakra.dll, which carries the event manifest.

  • Win11-26200.6584, sample captured from a live trace, binary version 11.00.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB
  • WS2022-20348.4893, schema read from the registered manifest, binary version 11.00.20348.2849, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 11.00.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB