Microsoft-Windows-Data-Pdf
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 1 | Page Load Start | Debug | N | N |
| 2 | Page Load Stop | Debug | N | N |
| 3 | Page Update Start | Debug | N | N |
| 4 | Page Update Stop | Debug | N | N |
| 5 | Page Render Start | Debug | N | N |
| 6 | Page Render Stop | Debug | N | N |
| 7 | EncodePageRendering Start | Debug | N | N |
| 8 | EncodePageRendering Stop | Debug | N | N |
| 9 | Load Document Start | Debug | N | N |
| 10 | Load Document Stop | Debug | N | N |
Event ID 3: Page Update Start
#Event ID 4: Page Update Stop
#Event ID 9: Load Document Start
#Event ID 10: Load Document Stop
#Provenance
ETW provider GUID b97561fe-b27a-4c48-aa3e-7d3addc105b1
Defined in Windows.Data.Pdf.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB