Microsoft-Windows-DLNA-Namespace

Event	Title	Channel	Sample	Rule
1001	GetThumbnailProviderStart	Analytic	N	N
1002	GetThumbnailProviderStop	Analytic	N	N
1003	BrowseStart	Analytic	N	N
1004	BrowseStop	Analytic	N	N
1005	SearchStart	Analytic	N	N
1006	SearchStop	Analytic	N	N
1007	Results2ShellPropertiesStart	Analytic	N	N
1008	Results2ShellPropertiesStop	Analytic	N	N
1009	Discover	Analytic	N	N
1010	Add	Analytic	N	N

Event ID 1001: GetThumbnailProviderStart

Channel: Analytic
Task: GetThumbnailProvider
Opcode: Start

Fields #

Name	Description
`HResultParam` UInt32

Event ID 1002: GetThumbnailProviderStop

Channel: Analytic
Task: GetThumbnailProvider
Opcode: Stop

Fields #

Name	Description
`HResultParam` UInt32

Event ID 1003: BrowseStart

Channel: Analytic
Task: Browse
Opcode: Start

Fields #

Name	Description
`ObjectID` UnicodeString
`IsBrowseDirectChildren` UInt32
`Filter` UnicodeString
`SortCriteria` UnicodeString
`StartingOffset` UInt32
`NumItemsToRetrieve` UInt32
`NumItemsReturned` UInt32
`NumItemsMatched` UInt32
`HResultParam` UInt32

Event ID 1004: BrowseStop

Channel: Analytic
Task: Browse
Opcode: Stop

Fields #

Name	Description
`ObjectID` UnicodeString
`IsBrowseDirectChildren` UInt32
`Filter` UnicodeString
`SortCriteria` UnicodeString
`StartingOffset` UInt32
`NumItemsToRetrieve` UInt32
`NumItemsReturned` UInt32
`NumItemsMatched` UInt32
`HResultParam` UInt32

Event ID 1005: SearchStart

Channel: Analytic
Task: Search
Opcode: Start

Fields #

Name	Description
`ObjectID` UnicodeString
`SearchCriteria` UnicodeString
`Filter` UnicodeString
`SortCriteria` UnicodeString
`StartingOffset` UInt32
`NumItemsToRetrieve` UInt32
`NumItemsReturned` UInt32
`NumItemsMatched` UInt32
`HResultParam` UInt32

Event ID 1006: SearchStop

Channel: Analytic
Task: Search
Opcode: Stop

Fields #

Name	Description
`ObjectID` UnicodeString
`SearchCriteria` UnicodeString
`Filter` UnicodeString
`SortCriteria` UnicodeString
`StartingOffset` UInt32
`NumItemsToRetrieve` UInt32
`NumItemsReturned` UInt32
`NumItemsMatched` UInt32
`HResultParam` UInt32

Event ID 1007: Results2ShellPropertiesStart

Channel: Analytic
Task: Results2ShellProperties
Opcode: Start

Event ID 1008: Results2ShellPropertiesStop

Channel: Analytic
Task: Results2ShellProperties
Opcode: Stop

Event ID 1009: Discover

Channel: Analytic
Task: Discover

Event ID 1010: Add

Channel: Analytic
Task: Add

Provenance

ETW provider GUID d38fb874-33e4-4dcf-911e-1b53bb106d53

Defined in dlnashext.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB