Microsoft-Windows-Diagnosis-WDC

Event	Title	Channel	Sample	Rule
5016	task_0	Operational	N	N
5017	task_05017	Operational	N	N
5018	task_05018	Operational	N	N
5100	ListUpdate	Operational	N	N
5101	ListUpdateInsert	Operational	N	N
5102	ListUpdateDelete	Operational	N	N
5103	task_05103	Operational	N	N
5200	PerfTrack_LaunchStart	Analytic	N	N
5201	PerfTrack_LaunchStop	Analytic	N	N
5202	PerfTrack_TabSwitchStart	Analytic	N	N
5203	PerfTrack_TabSwitchStop	Analytic	N	N
5204	PerfTrack_HandleSearchStart	Analytic	N	N
5205	PerfTrack_HandleSearchStop	Analytic	N	N
5206	PerfTrack_ColumnSortStart	Analytic	N	N
5207	PerfTrack_ColumnSortStop	Analytic	N	N

Event ID 5016: task_0

Channel: Operational

Fields #

Name	Description
`FileName` AnsiString
`Line` UInt32
`Address` Pointer
`Size` Pointer

Event ID 5017: task_05017

Channel: Operational

Fields #

Name	Description
`FileName` AnsiString
`Line` UInt32
`Address` Pointer

Event ID 5018: task_05018

Channel: Operational

Fields #

Name	Description
`FileName` AnsiString
`Line` UInt32
`Address` Pointer
`Size` Pointer
`OrigAddress` Pointer

Event ID 5100: ListUpdate

Channel: Operational
Task: ListUpdate
Opcode: Update

Fields #

Name	Description
`TableId` UInt32
`ItemPos` UInt32
`ItemState` UInt32
`ItemContent` UnicodeString

Event ID 5101: ListUpdateInsert

Channel: Operational
Task: ListUpdate
Opcode: Insert

Fields #

Name	Description
`TableId` UInt32
`ItemPos` UInt32
`ItemState` UInt32
`ItemContent` UnicodeString

References #

Microsoft Learn

Event ID 5102: ListUpdateDelete

Channel: Operational
Task: ListUpdate
Opcode: Delete

Fields #

Name	Description
`TableId` UInt32
`ItemPos` UInt32
`ItemState` UInt32
`ItemContent` UnicodeString

Event ID 5103: task_05103

Channel: Operational

Fields #

Name	Description
`FileName` AnsiString
`Function` AnsiString
`Line` UInt32
`ErrorText` UnicodeString

Event ID 5200: PerfTrack_LaunchStart

Channel: Analytic
Task: PerfTrack_Launch
Opcode: Start

Event ID 5201: PerfTrack_LaunchStop

Channel: Analytic
Task: PerfTrack_Launch
Opcode: Stop

Event ID 5202: PerfTrack_TabSwitchStart

Channel: Analytic
Task: PerfTrack_TabSwitch
Opcode: Start

Fields #

Name	Description
`TabId` UInt32

Event ID 5203: PerfTrack_TabSwitchStop

Channel: Analytic
Task: PerfTrack_TabSwitch
Opcode: Stop

Fields #

Name	Description
`TabId` UInt32

Event ID 5204: PerfTrack_HandleSearchStart

Channel: Analytic
Task: PerfTrack_HandleSearch
Opcode: Start

Fields #

Name	Description
`RequestCookie` UInt32

Event ID 5205: PerfTrack_HandleSearchStop

Channel: Analytic
Task: PerfTrack_HandleSearch
Opcode: Stop

Fields #

Name	Description
`RequestCookie` UInt32

Event ID 5206: PerfTrack_ColumnSortStart

Channel: Analytic
Task: PerfTrack_ColumnSort
Opcode: Start

Fields #

Name	Description
`TableId` UInt32
`ColumnId` UInt32

Event ID 5207: PerfTrack_ColumnSortStop

Channel: Analytic
Task: PerfTrack_ColumnSort
Opcode: Stop

Fields #

Name	Description
`TableId` UInt32
`ColumnId` UInt32

Provenance

ETW provider GUID 05921578-2261-42c7-a0d3-26ddbce6c50d

Defined in wdc.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.00, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.00, captured 2026-06-02 — Manifest XML pack, 2.0 MB