Microsoft-Windows-MediaFoundation-Performance
Event ID 3062: Configuration: dwType = dwType dwConfig=dwConfig.
#Event ID 3063: VideoSize dwScaled=dwScaleX dwScaleY=dwScaleY dwWindowX=dwWindowX dwWindowY=dwWindowY.
#Event ID 3067: PerfTrack: Audio Capture Start Request: object=object.
#Event ID 3068: PerfTrack: Video Capture Start Request: object=object.
#Event ID 3069: PerfTrack: Audio Capture First Sample Received: object=object.
#Event ID 3070: PerfTrack: Video Capture First Sample Received: object=object.
#Event ID 3071: MediaProc: Dynamic Topology Change Start: MF_MT_SUBTYPE=subtype.
#Event ID 3072: MediaProc: Dynamic Topology Change Stop: HRESULT=result.
#Event ID 3073: MediaProc: Dynamic Transform Removal Start: MFT=object.
#Event ID 3074: MediaProc: Dynamic Transform Removal Stop: MFT=object.
#Event ID 3075: MediaProc: Dynamic Transform Insertion: MFT=object.
#Event ID 3076: MediaProc: Sink-triggered format change: Source Node=object.
#Event ID 4000: Object Create Tag=tag Object object Object Type objectType.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
objectType UInt8 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4000,
"version": 0,
"level": 4,
"task": 300,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.972564800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 13564
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "WAVS",
"object": "0x152A346F6B0",
"objectType": "17"
},
"message": "Object Create Tag=WAVS Object 0x152A346F6B0 Object Type 17"
}
Event ID 4001: Object Delete Tag=tag Object object Object Type objectType.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
objectType UInt8 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4001,
"version": 0,
"level": 4,
"task": 300,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.069808700+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "WAVS",
"object": "0x152A346F6B0",
"objectType": "17"
},
"message": "Object Delete Tag=WAVS Object 0x152A346F6B0 Object Type 17"
}
Event ID 4002: Audio Renderer Starvation Tag=tag Object object ByteCount=byteCount.
#Event ID 4003: Video Frame Glitch Tag=tag Object=object Sample=sample Timestamp=timestamp TargetTime=targetTime Offset=offset.
#Event ID 4004: EVR Queue Sample Tag=tag Object=object Sample=sample Target QPC=targetQPC Submitted QPC=submittedQPC.
#Event ID 4005: EVR Dequeue DWM Tag=tag Object=object Sample=sample Original QPC=originalTargetQPC Target QPC=targetQPC Submitted QPC=targetAhead now=submittedQPC PresentTime=submittedAhead Frames Presented=now Re...
#Description
EVR Dequeue DWM Tag=tag Object=object Sample=sample Original QPC=originalTargetQPC Target QPC=targetQPC Submitted QPC=targetAhead now=submittedQPC PresentTime=submittedAhead Frames Presented=now Refresh Starts=presentTime Buffers Empty=dwmFramesPresented Refresh Frame Count=dwmRefreshStartCount.
Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
sample Pointer | |
originalTargetQPC Int64 | |
targetQPC Int64 | |
targetAhead Int64 | |
submittedQPC Int64 | |
submittedAhead Int64 | |
now Int64 | |
presentTime Int64 | |
dwmFramesPresented UInt64 | |
dwmRefreshStartCount Int64 | |
buffersEmpty UInt32 | |
refreshFrameCount Int64 |
Event ID 4006: EVR Present Tag=tag Object=object cPresentCount=cPresentCount dwFlags=dwFlags hrResult=hrResult llPresentTime=llPresentTime.
#Event ID 4007: EVR Monitor Estimate Tag=tag Object=object Screen Height=screenHeight Frame Height (x1000)=frameHeightx1000 Frame Rate (x1000)=frameRatex1000.
#Event ID 4008: EVR Sleep Tag=tag Object=object Thread Handle=hThread Sleep Type=sleepType width=width height=height format=format retries=retryCount.
#Event ID 4009: Dropped Data Tag=tag Object=object Data Type=dataType Sample Time=sampleTime Bytes Dropped=bytesDropped Drop Reasons=dropReasons.
#Event ID 4010: Get Clock Time Tag=tag Object=object Time=time.
#Event ID 4011: Predicated Video Sample Time Tag=tag Object=object Time=time.
#Event ID 4012: New Stream Tag=tag Object=object Type=streamType.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
streamType UInt8 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4012,
"version": 0,
"level": 4,
"task": 311,
"opcode": 0,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.053439700+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "ARen",
"object": "0x152A36E7310",
"streamType": "1"
},
"message": "New Stream Tag=ARen Object=0x152A36E7310 Type=1"
}
Event ID 4013: Media Type Change Tag=tag Object=object Stream=stream Type=byteCount.
#Event ID 4014: Transform Created Tag=tag Object=object CLSID=clsid Transform=transform User Mode=userTransform.
#Event ID 4015: Buffer Input Tag=tag Object=object Object Category=objectCategory Stream=stream Timestamp=timestamp Clock=clock Sample=sample Buffer Size=bufferSize Sample Size=sampleSize Sample Duration=duration.
#Event ID 4016: Buffer Output Tag=tag Object=object Object Category=objectCategory Stream=stream Timestamp=timestamp Clock=clock Sample=sample Buffer Size=bufferSize Sample Size=sampleSize Sample Duration=duration.
#Event ID 4017: Buffer Queued Tag=tag Object=object Object Category=objectCategory Stream=stream Timestamp=timestamp Clock=clock Sample=sample Buffer Size=bufferSize Sample Size=sampleSize Sample Duration=duration.
#Event ID 4018: Buffer Dropped Tag=tag Object=object Object Category=objectCategory Stream=stream Timestamp=timestamp Clock=clock Sample=sample Buffer Size=bufferSize Sample Size=sampleSize Sample Duration=duration.
#Event ID 4019: ProcessInput Tag=tag Object=object Object Category=objectCategory Sample=sample Buffer Size=byteCount Sample Time=sampleTime Processing Time=processTime.
#Event ID 4020: ProcessOutput Tag=tag Object=object Object Category=objectCategory Sample=sample Buffer Size=byteCount Sample Time=sampleTime Processing Time=processTime.
#Event ID 4021: APOProcess Tag=tag Object=object Object Category=objectCategory Sample=sample Buffer Size=byteCount Sample Time=sampleTime Processing Time=processTime.
#Event ID 4022: Unusual Streaming Event Tag=tag Object=object TypeprocessingType Event ID=event.
#Event ID 4023: Open File Tag=tag Object=object Name=fileName Handle=handle.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
handle Pointer | |
fileName UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4023,
"version": 0,
"level": 4,
"task": 318,
"opcode": 0,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.933821100+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 13564
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "W32F",
"object": "0x152A36C8F40",
"handle": "0xE34",
"fileName": "C:\\Windows\\Media\\ding.wav"
},
"message": "Open File Tag=W32F Object=0x152A36C8F40 Name=C:\\Windows\\Media\\ding.wav Handle=0xE34"
}
Event ID 4024: IO Read Request Tag=tag Object=object Handle=handle Offest=offset Byte Count=byteCount.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
handle Pointer | |
offset UInt64 | |
byteCount UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4024,
"version": 0,
"level": 4,
"task": 319,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.933999300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 13564
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "W32F",
"object": "0x152A36C8F40",
"handle": "0xE34",
"offset": "0",
"byteCount": "16"
},
"message": "IO Read Request Tag=W32F Object=0x152A36C8F40 Handle=0xE34 Offest=0 Byte Count=16"
}
Event ID 4025: IO Write Request Tag=tag Object=object Handle=handle Offest=offset Byte Count=byteCount.
#Event ID 4026: Disk IO Read Complete Tag=tag Object=object Handle=handle.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
handle Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4026,
"version": 0,
"level": 4,
"task": 319,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.934240200+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "W32F",
"object": "0x152A36C8F40",
"handle": "0xE34"
},
"message": "Disk IO Read Complete Tag=W32F Object=0x152A36C8F40 Handle=0xE34"
}
Event ID 4027: Disk IO Write Complete Tag=tag Object=object Handle=handle.
#Event ID 4028: Render Sample Allocate Sample Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4029: Render Sample Receive Sample Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4030: Render Sample Start Render Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4031: Render Sample End Render Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4032: Render Sample Start Mix Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4033: Render Sample End Mix Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4034: Render Sample Start Decode Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4035: Render Sample End Decode Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4036: Render Sample Start Deinterlace Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4038: Render Sample Start Procamp Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4039: Render Sample End Procamp Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4040: Render Sample Start FRC Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4041: Render Sample End FRC Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4042: Render Sample MID Render Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4043: Render Sample MAP Render Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4044: Render Sample Actual Render Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock Time=clock.
#Event ID 4045: Audio Renderer Buffer Fullness Tag=tag Object=object Fullness=fullness.
#Event ID 4046: State Change to Start Tag=tag Object=object.
#Event ID 4047: State Change to Stop Tag=tag Object=object.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4047,
"version": 0,
"level": 4,
"task": 334,
"opcode": 15,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.972725900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 13564
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "WAVS",
"object": "0x152A346F6B0"
},
"message": "State Change to Stop Tag=WAVS Object=0x152A346F6B0"
}
Event ID 4048: State Change to Pause Tag=tag Object=object.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4048,
"version": 0,
"level": 4,
"task": 334,
"opcode": 16,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.973376400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "WAVS",
"object": "0x152A346F6B0"
},
"message": "State Change to Pause Tag=WAVS Object=0x152A346F6B0"
}
Event ID 4049: Topo Loader Start Load Tag=tag Object=object.
#Event ID 4050: Topo Loader End Load Tag=tag Object=object.
#Event ID 4051: Topo Loader Start Create MFT Tag=tag Object=object.
#Event ID 4052: Topo Loader End Create MFT Tag=tag Object=object.
#Event ID 4053: Packet Sink Lost Tag=tag Object=object RTP Sequence=rtpSeq Packet Number=packetNumber.
#Event ID 4054: Packet Recover RTX Tag=tag Object=object RTP Sequence=rtpSeq Packet Number=packetNumber.
#Event ID 4055: Packet Recover FEC Tag=tag Object=object RTP Sequence=rtpSeq Packet Number=packetNumber.
#Event ID 4056: Media Cache Read Sample Tag=tag Object=object Segment ID=segmentID Number Pending=numberPending Sample Time=time Sample=sample.
#Event ID 4057: Media Cache On Read Sample Tag=tag Object=object Segment ID=segmentID Number Pending=numberPending Sample Time=time Sample=sample.
#Event ID 4058: Media Cache Write Sample Tag=tag Object=object Segment ID=segmentID Number Pending=numberPending Sample Time=time Sample=sample.
#Event ID 4059: Media Cache On Write Sample Tag=tag Object=object Segment ID=segmentID Number Pending=numberPending Sample Time=time Sample=sample.
#Event ID 4060: Media Cache Seek Tag=tag Object=object Segment ID=segmentID Number Pending=numberPending Sample Time=time Sample=sample.
#Event ID 4061: Media Cache On Seek Tag=tag Object=object Segment ID=segmentID Number Pending=numberPending Sample Time=time Sample=sample.
#Event ID 4062: Media Cache Trim Tag=tag Object=object Segment ID=segmentID Number Pending=numberPending Sample Time=time Sample=sample.
#Event ID 4063: Media Cache On Trim Tag=tag Object=object Segment ID=segmentID Number Pending=numberPending Sample Time=time Sample=sample.
#Event ID 4064: Network Platform - BeginGetHostByName hr=tag.
#Event ID 4065: Network Platform - EndGetHostByName hr=tag.
#Event ID 4066: Network Channel Begin Send Request Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4067: Network Channel End Send Request Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4068: Network Channel Begin Send Response Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4069: Network Channel End Send Response Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4070: Network Channel BeginReceive Request Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4071: Network Channel End Receive Request Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4072: Network Channel Receive Request Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4073: Network Channel Begin Open Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4074: Network Channel End Open Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4075: Network Channel Begin Connect Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4076: Network Channel End Connect Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4077: Network Channel Begin Read Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4078: Network Channel End Read Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4079: Network Channel Begin Write Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4080: Network Channel End Write Tag=tag Object=object Byte Count=bytes hr=hr.
#Event ID 4081: Network Session Begin Send Request Tag=tag Object=object Byte hr=hr.
#Event ID 4082: Network Session End Send Request Tag=tag Object=object Byte hr=hr.
#Event ID 4083: Network Session Begin Send ResposeTag=tag Object=object Byte hr=hr.
#Event ID 4084: Network Session End Send Respose Tag=tag Object=object Byte hr=hr.
#Event ID 4085: Network Session Begin Receive Request Tag=tag Object=object Byte hr=hr.
#Event ID 4086: Network Session End Receive Request Tag=tag Object=object Byte hr=hr.
#Event ID 4088: Network Session End Open Tag=tag Object=object Byte hr=hr.
#Event ID 4089: Network Session Begin Connect Tag=tag Object=object Byte hr=hr.
#Event ID 4090: Network Session End Connect Tag=tag Object=object Byte hr=hr.
#Event ID 4091: Network Client Begin Open Tag=tag Object=object hr=hr.
#Event ID 4092: Network Client End Open Tag=tag Object=object hr=hr.
#Event ID 4093: Network Client Begin Describe Tag=tag Object=object hr=hr.
#Event ID 4094: Network Client End Describe Tag=tag Object=object hr=hr.
#Event ID 4095: Network Client Begin Select Streams Tag=tag Object=object hr=hr.
#Event ID 4096: Network Client End Select Streams Tag=tag Object=object hr=hr.
#Event ID 4097: Network Client Begin Play Tag=tag Object=object hr=hr.
#Event ID 4098: Network Client End Play Tag=tag Object=object hr=hr.
#Event ID 4099: Network Client Begin Pause Tag=tag Object=object hr=hr.
#Event ID 4100: Network Client End Pause Tag=tag Object=object hr=hr.
#Event ID 4101: Network Client Begin Stop Tag=tag Object=object hr=hr.
#Event ID 4102: Network Client End Stop Tag=tag Object=object hr=hr.
#Event ID 4103: Network Client Begin Send Log Tag=tag Object=object hr=hr.
#Event ID 4104: Network Client End Send Log Tag=tag Object=object hr=hr.
#Event ID 4105: Network Client Send Keep Alive Log Tag=tag Object=object hr=hr.
#Event ID 4106: Network Client Received Announce Tag=tag Object=object hr=hr.
#Event ID 4107: Network Client Begin Packet Pair Tag=tag Object=object hr=hr.
#Event ID 4108: Network Client End Packet Pair Tag=tag Object=object hr=hr.
#Event ID 4109: Network Client Begin Tear Down Tag=tag Object=object hr=hr.
#Event ID 4110: Network Client End Tear Down Tag=tag Object=object hr=hr.
#Event ID 4111: Network Client Received EOS Tag=tag Object=object hr=hr.
#Event ID 4112: Network Client Begin Close Tag=tag Object=object hr=hr.
#Event ID 4113: Network Client End Close Tag=tag Object=object hr=hr.
#Event ID 4114: Network Client GUID Tag=tag Object =object GUID=guid.
#Event ID 4115: Network Source Disconnect Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4116: Network Source Reconnect Start Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4117: Network Source Reconnect Stop Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4118: Network Source Announce Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4119: Network Source EOS Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4120: Network Source Stream Switch Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4121: Network Source Stream Switch Done Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4122: Network Source Stream Buffering Start Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4123: Network Source Stream Buffering Stop Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4124: Network Source Stream Begin Connect Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4125: Network Source Stream End Connect Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4126: Network Source Stream Begin Open Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4127: Network Source Stream End Open Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4128: Network Source MCast Join Done Tag=tag Object =object Arg1=arg1 Arg2=arg2.
#Event ID 4129: HttpByteStream Create Tag=tag Object=object hr=hr.
#Event ID 4130: HttpByteStream Delete Tag=tag Object=object hr=hr.
#Event ID 4131: HttpByteStream Begin BeginOpen Tag=tag Object=object hr=hr.
#Event ID 4132: HttpByteStream EndBeginOpen Tag=tag Object=object hr=hr.
#Event ID 4133: HttpByteStream Begin EndOpenTag=tag Object=object hr=hr.
#Event ID 4134: HttpByteStream End EndOpen Tag=tag Object=object hr=hr.
#Event ID 4135: HttpByteStream Begin TimeSeek Tag=tag Object=object hr=hr.
#Event ID 4136: HttpByteStream End TimeSeek Tag=tag Object=object hr=hr.
#Event ID 4138: HttpByteStream End BeginDrmSetLicense Tag=tag Object=object hr=hr.
#Event ID 4139: HttpByteStream Begin EndDrmSetLicense Tag=tag Object=object hr=hr.
#Event ID 4140: HttpByteStream End EndDrmSetLicense Tag=tag Object=object hr=hr.
#Event ID 4141: HttpByteStream Begin BeginThrottle Tag=tag Object=object hr=hr.
#Event ID 4142: HttpByteStream End BeginThrottle Tag=tag Object=object hr=hr.
#Event ID 4143: HttpByteStream Begin EndThrottle Tag=tag Object=object hr=hr.
#Event ID 4144: HttpByteStream End EndThrottle Tag=tag Object=object hr=hr.
#Event ID 4145: BaseRemoteByteStream Create Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4146: BaseRemoteByteStream Delete Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4147: BaseRemoteByteStream Begin Read Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4148: BaseRemoteByteStream End Read Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4149: BaseRemoteByteStream Begin BeginRead Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4150: BaseRemoteByteStream End BeginRead Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4151: BaseRemoteByteStream Begin EndRead Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4152: BaseRemoteByteStream End EndRead Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4153: BaseRemoteByteStream Seek Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4154: BaseRemoteByteStream Begin Close Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4155: BaseRemoteByteStream End Close Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4156: BaseRemoteByteStream Config Buffering Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4157: BaseRemoteByteStream Enable Buffering Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4158: BaseRemoteByteStream Begin BeginSave Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4159: BaseRemoteByteStream End BeginSave Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4160: BaseRemoteByteStream Begin EndSave Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4161: BaseRemoteByteStream End EndSave Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4162: BaseRemoteByteStream CancelSave Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4163: BaseRemoteByteStream Fire StartBuffering Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4164: BaseRemoteByteStream File StopBuffering Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4165: UrlmonByteStream Create Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4166: UrlmonByteStream Delete Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4167: UrlmonByteStream Begin Read Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4168: UrlmonByteStream End Read Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4169: UrlmonByteStream Begin BeginRead Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4170: UrlmonByteStream End BeginRead Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4171: UrlmonByteStream Begin EndRead Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4172: UrlmonByteStream End EndRead Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4173: UrlmonByteStream Seek Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4174: UrlmonByteStream Begin Close Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4175: UrlmonByteStream End Close Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4176: UrlmonByteStream Config Buffering Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4177: UrlmonByteStream Enable Buffering Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4178: UrlmonByteStream Begin BeginSave Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4179: UrlmonByteStream End BeginSave Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4180: UrlmonByteStream Begin EndSave Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4181: UrlmonByteStream End EndSave Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4182: UrlmonByteStream Fire StartBuffering Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4183: UrlmonByteStream File StopBuffering Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4184: HttpWebRequest Begin BeginSendRequest Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4185: HttpWebRequest Begin EndSendRequest Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4186: HttpWebRequest Begin EndSendRequest Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4188: HttpWebRequest Begin BeginReceiveResponse Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4189: HttpWebRequest End BeginReceiveResponse Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4190: HttpWebRequest Begin EndReceiveResponse Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4191: HttpWebRequest End EndReceiveResponse Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4192: HttpWebRequest Begin BeginReadPayload Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4193: HttpWebRequest End BeginReadPayload Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4194: HttpWebRequest Begin EndReadPayload Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4195: HttpWebRequest End EndReadPayload Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4196: HttpWebRequest Close Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4197: HttpWebRequest Begin StatusCallback Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4198: HttpWebRequest End StatusCallback Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4199: HttpWebRequest Begin CreateCacheEntry Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4200: HttpWebRequest End CreateCacheEntry Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4201: HttpWebRequest Begin LoadCacheEntry Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4202: HttpWebRequest End LoadCacheEntry Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4203: HttpWebRequest Begin DeleteCacheEntry Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4204: HttpWebRequest End DeleteCacheEntry Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4205: HttpWebRequest Begin SaveCacheEntry Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4206: HttpWebRequest End SaveCacheEntry Tag=tag Object=object hr=hr Arg=arg.
#Event ID 4207: Source Resolution Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4207,
"version": 0,
"level": 4,
"task": 431,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.931534800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "NULL",
"objectCreated": "0x0",
"hr": "0x0"
},
"message": "Source Resolution Tag=SoRe Object=0x152A36BC6E0 URL=NULL Object Created=0x0 hr=0x0"
}
Event ID 4208: Source Resolution Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4208,
"version": 0,
"level": 4,
"task": 432,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.931550000+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "NULL",
"objectCreated": "0x0",
"hr": "0x0"
},
"message": "Source Resolution Tag=SoRe Object=0x152A36BC6E0 URL=NULL Object Created=0x0 hr=0x0"
}
Event ID 4209: Source Resolution Begin BeginCreateObjectFromURL Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4209,
"version": 0,
"level": 4,
"task": 433,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.931566100+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "C:\\Windows\\Media\\ding.wav",
"objectCreated": "0x0",
"hr": "0x0"
},
"message": "Source Resolution Begin BeginCreateObjectFromURL Tag=SoRe Object=0x152A36BC6E0 URL=C:\\Windows\\Media\\ding.wav Object Created=0x0 hr=0x0"
}
Event ID 4210: Source Resolution End BeginCreateObjectFromURL Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4210,
"version": 0,
"level": 4,
"task": 433,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.931815000+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "C:\\Windows\\Media\\ding.wav",
"objectCreated": "0x0",
"hr": "0x0"
},
"message": "Source Resolution End BeginCreateObjectFromURL Tag=SoRe Object=0x152A36BC6E0 URL=C:\\Windows\\Media\\ding.wav Object Created=0x0 hr=0x0"
}
Event ID 4211: Source Resolution Begin EndCreateObjectFromURL Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4211,
"version": 0,
"level": 4,
"task": 434,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.973480300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "NULL",
"objectCreated": "0x0",
"hr": "0x0"
},
"message": "Source Resolution Begin EndCreateObjectFromURL Tag=SoRe Object=0x152A36BC6E0 URL=NULL Object Created=0x0 hr=0x0"
}
Event ID 4212: Source Resolution End EndCreateObjectFromURL Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4212,
"version": 0,
"level": 4,
"task": 434,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.973498800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "file:///C:/Windows/Media/ding.wav",
"objectCreated": "0x0",
"hr": "0x0"
},
"message": "Source Resolution End EndCreateObjectFromURL Tag=SoRe Object=0x152A36BC6E0 URL=file:///C:/Windows/Media/ding.wav Object Created=0x0 hr=0x0"
}
Event ID 4213: Source Resolution Begin BeginCreateObjectFromByteStream Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Event ID 4214: Source Resolution End BeginCreateObjectFromByteStream Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Event ID 4215: Source Resolution Begin EndCreateObjectFromByteStream Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Event ID 4216: Source Resolution End EndCreateObjectFromByteStream Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Event ID 4217: Source Resolution Begin LookupSchemeHandler Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4217,
"version": 0,
"level": 4,
"task": 437,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.932054100+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 13564
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "file:///C:/Windows/Media/ding.wav",
"objectCreated": "0x0",
"hr": "0x0"
},
"message": "Source Resolution Begin LookupSchemeHandler Tag=SoRe Object=0x152A36BC6E0 URL=file:///C:/Windows/Media/ding.wav Object Created=0x0 hr=0x0"
}
Event ID 4218: Source Resolution End LookupSchemeHandler Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4218,
"version": 0,
"level": 4,
"task": 437,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.932381600+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 13564
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "file:",
"objectCreated": "0x0",
"hr": "0x0"
},
"message": "Source Resolution End LookupSchemeHandler Tag=SoRe Object=0x152A36BC6E0 URL=file: Object Created=0x0 hr=0x0"
}
Event ID 4219: Source Resolution Begin LookupByteStreamHandler Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4219,
"version": 0,
"level": 4,
"task": 438,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.934314500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "file:///C:/Windows/Media/ding.wav",
"objectCreated": "0x0",
"hr": "0x0"
},
"message": "Source Resolution Begin LookupByteStreamHandler Tag=SoRe Object=0x152A36BC6E0 URL=file:///C:/Windows/Media/ding.wav Object Created=0x0 hr=0x0"
}
Event ID 4220: Source Resolution End LookupByteStreamHandler Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4220,
"version": 0,
"level": 4,
"task": 438,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.934437100+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "file:///C:/Windows/Media/ding.wav",
"objectCreated": "0x0",
"hr": "0x0"
},
"message": "Source Resolution End LookupByteStreamHandler Tag=SoRe Object=0x152A36BC6E0 URL=file:///C:/Windows/Media/ding.wav Object Created=0x0 hr=0x0"
}
Event ID 4221: Source Resolution Begin SchemeHandlerBeginCreateObject Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4221,
"version": 0,
"level": 4,
"task": 439,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.933359800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 13564
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "file:///C:/Windows/Media/ding.wav",
"objectCreated": "0x152A3422F10",
"hr": "0x0"
},
"message": "Source Resolution Begin SchemeHandlerBeginCreateObject Tag=SoRe Object=0x152A36BC6E0 URL=file:///C:/Windows/Media/ding.wav Object Created=0x152A3422F10 hr=0x0"
}
Event ID 4222: Source Resolution End SchemeHandlerBeginCreateObject Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4222,
"version": 0,
"level": 4,
"task": 439,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.933524400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 13564
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "file:///C:/Windows/Media/ding.wav",
"objectCreated": "0x152A3422F10",
"hr": "0x0"
},
"message": "Source Resolution End SchemeHandlerBeginCreateObject Tag=SoRe Object=0x152A36BC6E0 URL=file:///C:/Windows/Media/ding.wav Object Created=0x152A3422F10 hr=0x0"
}
Event ID 4223: Source Resolution Begin SchemeHandlerEndCreateObject Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4223,
"version": 0,
"level": 4,
"task": 440,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.933917700+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 13564
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "file:///C:/Windows/Media/ding.wav",
"objectCreated": "0x152A3422F10",
"hr": "0x0"
},
"message": "Source Resolution Begin SchemeHandlerEndCreateObject Tag=SoRe Object=0x152A36BC6E0 URL=file:///C:/Windows/Media/ding.wav Object Created=0x152A3422F10 hr=0x0"
}
Event ID 4224: Source Resolution End SchemeHandlerEndCreateObject Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Event ID 4225: Source Resolution ByteStream Created Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4225,
"version": 0,
"level": 4,
"task": 442,
"opcode": 0,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.933951400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 13564
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "NULL",
"objectCreated": "0x152A36C8F40",
"hr": "0x0"
},
"message": "Source Resolution ByteStream Created Tag=SoRe Object=0x152A36BC6E0 URL=NULL Object Created=0x152A36C8F40 hr=0x0"
}
Event ID 4226: Source Resolution Begin ByteStreamHandlerBeginCreateObject Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4226,
"version": 0,
"level": 4,
"task": 443,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.972201600+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "file:///C:/Windows/Media/ding.wav",
"objectCreated": "0x152A3416620",
"hr": "0x0"
},
"message": "Source Resolution Begin ByteStreamHandlerBeginCreateObject Tag=SoRe Object=0x152A36BC6E0 URL=file:///C:/Windows/Media/ding.wav Object Created=0x152A3416620 hr=0x0"
}
Event ID 4227: Source Resolution End ByteStreamHandlerBeginCreateObject Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4227,
"version": 0,
"level": 4,
"task": 443,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.972355500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "file:///C:/Windows/Media/ding.wav",
"objectCreated": "0x152A3416620",
"hr": "0x0"
},
"message": "Source Resolution End ByteStreamHandlerBeginCreateObject Tag=SoRe Object=0x152A36BC6E0 URL=file:///C:/Windows/Media/ding.wav Object Created=0x152A3416620 hr=0x0"
}
Event ID 4228: Source Resolution Begin ByteStreamHandlerEndCreateObject Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4228,
"version": 0,
"level": 4,
"task": 444,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.973413400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "file:///C:/Windows/Media/ding.wav",
"objectCreated": "0x152A3416620",
"hr": "0x0"
},
"message": "Source Resolution Begin ByteStreamHandlerEndCreateObject Tag=SoRe Object=0x152A36BC6E0 URL=file:///C:/Windows/Media/ding.wav Object Created=0x152A3416620 hr=0x0"
}
Event ID 4229: Source Resolution End ByteStreamHandlerEndCreateObject Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4229,
"version": 0,
"level": 4,
"task": 444,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.973431000+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "file:///C:/Windows/Media/ding.wav",
"objectCreated": "0x152A3416620",
"hr": "0x0"
},
"message": "Source Resolution End ByteStreamHandlerEndCreateObject Tag=SoRe Object=0x152A36BC6E0 URL=file:///C:/Windows/Media/ding.wav Object Created=0x152A3416620 hr=0x0"
}
Event ID 4230: Source Resolution Media Source Created Tag=tag Object=object URL=url Object Created=objectCreated hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
url UnicodeString | |
objectCreated Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4230,
"version": 0,
"level": 4,
"task": 445,
"opcode": 0,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.973446400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "SoRe",
"object": "0x152A36BC6E0",
"url": "NULL",
"objectCreated": "0x152A346F3E0",
"hr": "0x0"
},
"message": "Source Resolution Media Source Created Tag=SoRe Object=0x152A36BC6E0 URL=NULL Object Created=0x152A346F3E0 hr=0x0"
}
Event ID 4231: Bitpump Start Async Call Tag=tag Object=object State=state Context=context hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
state UInt32 | |
context HexInt32 | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4231,
"version": 0,
"level": 4,
"task": 446,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.053314500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MsBp",
"object": "0x152A36D53B0",
"state": "8",
"context": "0x1",
"hr": "0x0"
},
"message": "Bitpump Start Async Call Tag=MsBp Object=0x152A36D53B0 State=8 Context=0x1 hr=0x0"
}
Event ID 4232: Bitpump End Async Call Tag=tag Object=object State=state Context=context hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
state UInt32 | |
context HexInt32 | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4232,
"version": 0,
"level": 4,
"task": 447,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.053905200+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MsBp",
"object": "0x152A36D53B0",
"state": "8",
"context": "0x1",
"hr": "0x0"
},
"message": "Bitpump End Async Call Tag=MsBp Object=0x152A36D53B0 State=8 Context=0x1 hr=0x0"
}
Event ID 4233: Bitpump Receive Event Tag=tag Object=object State=state Context=context hr=hr.
#Event ID 4234: Bitpump Error Tag=tag Object=object State=state Context=context hr=hr.
#Event ID 4235: Bitpump Critical Error Tag=tag Object=object State=state Context=context hr=hr.
#Event ID 4236: Bitpump Start Sync Call Tag=tag Object=object State=state Context=context hr=hr.
#Event ID 4238: Bitpump Wait For Sample Tag=tag Object=object State=state Context=context hr=hr.
#Event ID 4239: Bitpump Media Sample Tag=tag Object=object State=state Context=context hr=hr.
#Event ID 4240: Media Session Begin SetTopology Tag=tag Object=object Parameter=parameter.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
parameter Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4240,
"version": 0,
"level": 4,
"task": 455,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.053245700+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MsBp",
"object": "0x152A36D53B0",
"parameter": "0x152A36D0F90"
},
"message": "Media Session Begin SetTopology Tag=MsBp Object=0x152A36D53B0 Parameter=0x152A36D0F90"
}
Event ID 4241: Media Session End SetTopology Tag=tag Object=object Parameter=parameter.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
parameter Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4241,
"version": 0,
"level": 4,
"task": 455,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.053926800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MsBp",
"object": "0x152A36D53B0",
"parameter": "0x0"
},
"message": "Media Session End SetTopology Tag=MsBp Object=0x152A36D53B0 Parameter=0x0"
}
Event ID 4242: Media Session Begin Start Tag=tag Object=object Parameter=parameter.
#Event ID 4243: Media Session End Start Tag=tag Object=object Parameter=parameter.
#Event ID 4244: Media Session Begin Stop Tag=tag Object=object Parameter=parameter.
#Event ID 4245: Media Session End Stop Tag=tag Object=object Parameter=parameter.
#Event ID 4246: Media Session Begin Pause Tag=tag Object=object Parameter=parameter.
#Event ID 4247: Media Session End Pause Tag=tag Object=object Parameter=parameter.
#Event ID 4248: Media Session Begin Close Tag=tag Object=object Parameter=parameter.
#Event ID 4249: Media Session End Close Tag=tag Object=object Parameter=parameter.
#Event ID 4250: Media Session Begin Shutdown Tag=tag Object=object Parameter=parameter.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
parameter Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4250,
"version": 0,
"level": 4,
"task": 460,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.069828700+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MsBp",
"object": "0x152A36D53B0",
"parameter": "0x0"
},
"message": "Media Session Begin Shutdown Tag=MsBp Object=0x152A36D53B0 Parameter=0x0"
}
Event ID 4251: Media Session End Shutdown Tag=tag Object=object Parameter=parameter.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
parameter Pointer |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4251,
"version": 0,
"level": 4,
"task": 460,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.069914000+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MsBp",
"object": "0x152A36D53B0",
"parameter": "0x0"
},
"message": "Media Session End Shutdown Tag=MsBp Object=0x152A36D53B0 Parameter=0x0"
}
Event ID 4252: Media Session Begin Presentation Switch Tag=tag Object=object Parameter=parameter.
#Event ID 4253: Media Session End Presentation Switch Tag=tag Object=object Parameter=parameter.
#Event ID 4254: Sequencer Source Start Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4255: Sequencer Source Stop Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4256: Sequencer Source OnContextEvent Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4257: Sequencer Source ProcessSample Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4258: Sequencer Source OnStreamEvent Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4259: Sequencer Source BeginCreateObjectFromNode Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4260: Sequencer Source EndCreateObjectFromNode Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4261: Quality Manager Set Quality Level Tag=tag Object=object Knob ID=knobID Previous Level=previousLevel New Level=newLevel Drop Time=dropTime.
#Event ID 4262: Quality Manager Set Drop Mode Tag=tag Object=object Knob ID=knobID Previous Level=previousLevel New Level=newLevel Drop Time=dropTime.
#Event ID 4263: Quality Manager Set Drop Time Tag=tag Object=object Knob ID=knobID Previous Level=previousLevel New Level=newLevel Drop Time=dropTime.
#Event ID 4264: Media Processor Source Start Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4265: Media Processor Source Create Topology Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4266: Media Processor Source Open Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4267: Media Processor Source ProcessSample Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4268: Media Processor Source Send Event Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4269: Frame Grabber Open Source Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4270: Frame Grabber Get Frame Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4271: Frame Grabber Invoke Tag=tag Object=object Event=eventType Time=time Parameter=parameter URL=url.
#Event ID 4272: Adjust Sample Time OneShot Tag=tag Object=object Original Time=originalTime Adjustment=adjustment.
#Event ID 4273: Adjust Sample Time Repeat Tag=tag Object=object Original Time=originalTime Adjustment=adjustment.
#Event ID 4274: Video Render Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Clock TimeclockTime hwnd=hwnd Refresh Rate=refreshRate Width=width Height=height Left=left Top...
#Description
Video Render Tag= Object= Sample= Sample Time= Sample Duration= Clock Time hwnd= Refresh Rate= Width= Height= Left= Top= Right= Bottom= Left1= Top1= Right1= Bottom1=.
Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
sample Pointer | |
sampleTime Int64 | |
sampleDuration Int64 | |
clockTime Int64 | |
hwnd Pointer | |
refreshRate UInt32 | |
width UInt32 | |
height UInt32 | |
left UInt32 | |
top UInt32 | |
right UInt32 | |
bottom UInt32 | |
left1 UInt32 | |
top1 UInt32 | |
right1 UInt32 | |
bottom1 UInt32 |
Event ID 4275: Audio Render Tag=tag Object=object Sample=sample Sample Time=sampleTime Sample Duration=sampleDuration Master Clock Time=masterTime Device Clock Time=deviceTime.
#Event ID 4276: Metadata Created Tag=tag Object=object hr=hr PropKey=propertyKey PropVariant=propvariant.
#Event ID 4277: Metadata Loaded Tag=tag Object=object hr=hr PropKey=propertyKey PropVariant=propvariant.
#Event ID 4278: Metadata GetCount Tag=tag Object=object hr=hr PropKey=propertyKey PropVariant=propvariant.
#Event ID 4279: Metadata GetAt Tag=tag Object=object hr=hr PropKey=propertyKey PropVariant=propvariant.
#Event ID 4280: Metadata GetValue Tag=tag Object=object hr=hr PropKey=propertyKey PropVariant=propvariant.
#Event ID 4281: Metadata SetValue Tag=tag Object=object hr=hr PropKey=propertyKey PropVariant=propvariant.
#Event ID 4282: Metadata Flush Tag=tag Object=object hr=hr PropKey=propertyKey PropVariant=propvariant.
#Event ID 4283: Metadata OnGetCount Tag=tag Object=object hr=hr PropKey=propertyKey PropVariant=propvariant.
#Event ID 4284: Metadata OnGetAt Tag=tag Object=object hr=hr PropKey=propertyKey PropVariant=propvariant.
#Event ID 4285: Metadata OnGetValue Tag=tag Object=object hr=hr PropKey=propertyKey PropVariant=propvariant.
#Event ID 4286: Metadata OnSetValue Tag=tag Object=object hr=hr PropKey=propertyKey PropVariant=propvariant.
#Event ID 4288: Muxer ProcessSample Tag=tag Object=object Stream Number=streamNumber Sample Time=sampleTime Sample Byte Count=sampleByteCount Packet Numer=packetNumber Packet Send Time=packetSendTime Packet Byte C...
#Description
Muxer ProcessSample Tag=tag Object=object Stream Number=streamNumber Sample Time=sampleTime Sample Byte Count=sampleByteCount Packet Numer=packetNumber Packet Send Time=packetSendTime Packet Byte Count=packetByteCount.
Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
streamNumber UInt32 | |
sampleTime Int64 | |
sampleByteCount UInt32 | |
packetNumber Int64 | |
packetSendTime Int64 | |
packetByteCount UInt32 |
Event ID 4289: Muxer Add Payload Tag=tag Object=object Stream Number=streamNumber Sample Time=sampleTime Sample Byte Count=sampleByteCount Packet Numer=packetNumber Packet Send Time=packetSendTime Packet Byte Cou...
#Description
Muxer Add Payload Tag=tag Object=object Stream Number=streamNumber Sample Time=sampleTime Sample Byte Count=sampleByteCount Packet Numer=packetNumber Packet Send Time=packetSendTime Packet Byte Count=packetByteCount.
Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
streamNumber UInt32 | |
sampleTime Int64 | |
sampleByteCount UInt32 | |
packetNumber Int64 | |
packetSendTime Int64 | |
packetByteCount UInt32 |
Event ID 4290: Muxer OnCompletedPacket Tag=tag Object=object Stream Number=streamNumber Sample Time=sampleTime Sample Byte Count=sampleByteCount Packet Numer=packetNumber Packet Send Time=packetSendTime Packet By...
#Description
Muxer OnCompletedPacket Tag=tag Object=object Stream Number=streamNumber Sample Time=sampleTime Sample Byte Count=sampleByteCount Packet Numer=packetNumber Packet Send Time=packetSendTime Packet Byte Count=packetByteCount.
Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
streamNumber UInt32 | |
sampleTime Int64 | |
sampleByteCount UInt32 | |
packetNumber Int64 | |
packetSendTime Int64 | |
packetByteCount UInt32 |
Event ID 4291: Timer Late Tag=tag Object=object Event Time=eventTime Late By=lateBy Callback=callback.
#Event ID 4292: MFGraph Start Play Tag=tag Object=object hr=hr.
#Event ID 4293: MFGraph End Play Tag=tag Object=object hr=hr.
#Event ID 4294: MFGraph Start Stop Tag=tag Object=object hr=hr.
#Event ID 4295: MFGraph End Stop Tag=tag Object=object hr=hr.
#Event ID 4296: MFGraph Start Pause Tag=tag Object=object hr=hr.
#Event ID 4297: MFGraph End Pause Tag=tag Object=object hr=hr.
#Event ID 4298: MFGraph Start Render Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4298,
"version": 0,
"level": 4,
"task": 502,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.931422300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph Start Render Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4299: MFGraph End Render Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4299,
"version": 0,
"level": 4,
"task": 502,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.931833700+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph End Render Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4300: MFGraph Start FindInterfaceOnFilter Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4300,
"version": 0,
"level": 4,
"task": 503,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.930635500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph Start FindInterfaceOnFilter Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4301: MFGraph End FindInterfaceOnFilter Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4301,
"version": 0,
"level": 4,
"task": 503,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.930649700+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0xC00D36BA"
},
"message": "MFGraph End FindInterfaceOnFilter Tag=MFGR Object=0x152A36C4F40 hr=0xC00D36BA"
}
Event ID 4302: MFGraph Start Scan Tag=tag Object=object hr=hr.
#Event ID 4303: MFGraph End Scan Tag=tag Object=object hr=hr.
#Event ID 4304: MFGraph Start Set Rate Tag=tag Object=object hr=hr.
#Event ID 4305: MFGraph End Set Rate Tag=tag Object=object hr=hr.
#Event ID 4306: MFGraph Start Insert Node Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4306,
"version": 0,
"level": 4,
"task": 506,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.915214400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph Start Insert Node Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4307: MFGraph End Insert Node Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4307,
"version": 0,
"level": 4,
"task": 506,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.930537300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph End Insert Node Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4308: MFGraph Start Begin Batch Insert Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4308,
"version": 0,
"level": 4,
"task": 507,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.915140100+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph Start Begin Batch Insert Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4309: MFGraph End Begin Batch Insert Tag=tag Object=object hr=hr.
#Event ID 4310: MFGraph Start End Batch Insert Tag=tag Object=object hr=hr.
#Event ID 4311: MFGraph End End Batch Insert Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4311,
"version": 0,
"level": 4,
"task": 507,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.915153500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x80004001"
},
"message": "MFGraph End End Batch Insert Tag=MFGR Object=0x152A36C4F40 hr=0x80004001"
}
Event ID 4312: MFGraph Start Close Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4312,
"version": 0,
"level": 4,
"task": 508,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.068867900+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph Start Close Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4313: MFGraph End Close Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4313,
"version": 0,
"level": 4,
"task": 508,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.070498100+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph End Close Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4314: MFGraph Start Set Volume Tag=tag Object=object hr=hr.
#Event ID 4315: MFGraph End Set Volume Tag=tag Object=object hr=hr.
#Event ID 4316: MFGraph Start Set Stop Position Tag=tag Object=object hr=hr.
#Event ID 4317: MFGraph End Set Stop Position Tag=tag Object=object hr=hr.
#Event ID 4318: MFGraph Start Set Current Position Tag=tag Object=object hr=hr.
#Event ID 4319: MFGraph End Set Current Position Tag=tag Object=object hr=hr.
#Event ID 4320: MFGraph Start Set Context Tag=tag Object=object hr=hr.
#Event ID 4321: MFGraph End Set Context Tag=tag Object=object hr=hr.
#Event ID 4322: MFGraph Start Queue Tag=tag Object=object hr=hr.
#Event ID 4323: MFGraph End Queue Tag=tag Object=object hr=hr.
#Event ID 4324: MFGraph Start Init Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4324,
"version": 0,
"level": 4,
"task": 514,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.857273300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph Start Init Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4325: MFGraph End Init Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4325,
"version": 0,
"level": 4,
"task": 514,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.915060800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph End Init Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4326: MFGraph Start InitEx Tag=tag Object=object hr=hr.
#Event ID 4327: MFGraph End InitEx Tag=tag Object=object hr=hr.
#Event ID 4328: MFGraph Begin Get Type Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4328,
"version": 0,
"level": 4,
"task": 516,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.915084400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph Begin Get Type Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4329: MFGraph End Get Type Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4329,
"version": 0,
"level": 4,
"task": 516,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.915098000+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph End Get Type Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4330: MFGraph Begin IsReused Tag=tag Object=object hr=hr.
#Event ID 4331: MFGraph End IsReused Tag=tag Object=object hr=hr.
#Event ID 4332: MFGraph Begin GetURL Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4332,
"version": 0,
"level": 4,
"task": 518,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.068645800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph Begin GetURL Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4333: MFGraph End GetURL Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4333,
"version": 0,
"level": 4,
"task": 518,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.068661800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph End GetURL Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4334: MFGraph Begin Get Context Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4334,
"version": 0,
"level": 4,
"task": 519,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.068675100+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph Begin Get Context Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4335: MFGraph End Get Context Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4335,
"version": 0,
"level": 4,
"task": 519,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.068687500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph End Get Context Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4336: MFGraph Begin Get Cookie Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4336,
"version": 0,
"level": 4,
"task": 520,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.068703500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph Begin Get Cookie Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4337: MFGraph End Get Cookie Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4337,
"version": 0,
"level": 4,
"task": 520,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.068716200+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph End Get Cookie Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4338: MFGraph Begin Set Cookie Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4338,
"version": 0,
"level": 4,
"task": 521,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.856891500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph Begin Set Cookie Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4339: MFGraph End Set Cookie Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4339,
"version": 0,
"level": 4,
"task": 521,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.856907500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x1"
},
"message": "MFGraph End Set Cookie Tag=MFGR Object=0x152A36C4F40 hr=0x1"
}
Event ID 4340: MFGraph Begin Get Open State Tag=tag Object=object hr=hr.
#Event ID 4341: MFGraph End Get Open State Tag=tag Object=object hr=hr.
#Event ID 4342: MFGraph Begin Get Rate Tag=tag Object=object hr=hr.
#Event ID 4343: MFGraph End Get Rate Tag=tag Object=object hr=hr.
#Event ID 4344: MFGraph Begin Get Current Position Tag=tag Object=object hr=hr.
#Event ID 4345: MFGraph End Get Current Position Tag=tag Object=object hr=hr.
#Event ID 4346: MFGraph Begin Get Stop Position Tag=tag Object=object hr=hr.
#Event ID 4347: MFGraph End Get Stop Position Tag=tag Object=object hr=hr.
#Event ID 4348: MFGraph Begin Get Volume Tag=tag Object=object hr=hr.
#Event ID 4349: MFGraph End Get Volume Tag=tag Object=object hr=hr.
#Event ID 4350: MFGraph Begin Get Media Caps Tag=tag Object=object hr=hr.
#Event ID 4351: MFGraph End Get Media Caps Tag=tag Object=object hr=hr.
#Event ID 4352: MFGraph Begin Get Control Caps Tag=tag Object=object hr=hr.
#Event ID 4353: MFGraph End Get Control Caps Tag=tag Object=object hr=hr.
#Event ID 4354: MFGraph Begin Get Seek Caps Tag=tag Object=object hr=hr.
#Event ID 4355: MFGraph End Get Seek Caps Tag=tag Object=object hr=hr.
#Event ID 4356: MFGraph Begin Get Jump Caps Tag=tag Object=object hr=hr.
#Event ID 4357: MFGraph End Get Jump Caps Tag=tag Object=object hr=hr.
#Event ID 4358: MFGraph Begin Set AutoRewind Tag=tag Object=object hr=hr.
#Event ID 4359: MFGraph End Set AutoRewind Tag=tag Object=object hr=hr.
#Event ID 4360: MFGraph Begin Find Plugin Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4360,
"version": 0,
"level": 4,
"task": 532,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.915179800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x0"
},
"message": "MFGraph Begin Find Plugin Tag=MFGR Object=0x152A36C4F40 hr=0x0"
}
Event ID 4361: MFGraph End Find Plugin Tag=tag Object=object hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4361,
"version": 0,
"level": 4,
"task": 532,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.915193600+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"hr": "0x1"
},
"message": "MFGraph End Find Plugin Tag=MFGR Object=0x152A36C4F40 hr=0x1"
}
Event ID 4362: MFGraph Begin Handle Presentation Switch Tag=tag Object=object hr=hr.
#Event ID 4363: MFGraph End Handle Presentation Switch Tag=tag Object=object hr=hr.
#Event ID 4364: MFGraph Event Begin Notify State Change Tag=tag Object=object Parameter=parameter bstr=bstr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
parameter UInt32 | |
bstr UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4364,
"version": 0,
"level": 4,
"task": 534,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.068970300+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"parameter": "22",
"bstr": "NULL"
},
"message": "MFGraph Event Begin Notify State Change Tag=MFGR Object=0x152A36C4F40 Parameter=22 bstr=NULL"
}
Event ID 4365: MFGraph Event End Notify State ChangeTag=tag Object=object Parameter=parameter bstr=bstr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
parameter UInt32 | |
bstr UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4365,
"version": 0,
"level": 4,
"task": 534,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.069074000+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"parameter": "22",
"bstr": "NULL"
},
"message": "MFGraph Event End Notify State ChangeTag=MFGR Object=0x152A36C4F40 Parameter=22 bstr=NULL"
}
Event ID 4366: MFGraph Event Begin Notify Playback End Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4367: MFGraph Event End Notify Playback End Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4368: MFGraph Event Begin Notify Rate Change Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4369: MFGraph Event End Notify Rate Change Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4370: MFGraph Event Begin Notify Error Tag=tag Object=object Parameter=parameter bstr=bstr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
parameter UInt32 | |
bstr UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4370,
"version": 0,
"level": 4,
"task": 537,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.058090400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"parameter": "3222097540",
"bstr": "NULL"
},
"message": "MFGraph Event Begin Notify Error Tag=MFGR Object=0x152A36C4F40 Parameter=3222097540 bstr=NULL"
}
Event ID 4371: MFGraph Event End Notify Error Tag=tag Object=object Parameter=parameter bstr=bstr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
parameter UInt32 | |
bstr UnicodeString |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4371,
"version": 0,
"level": 4,
"task": 537,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.058249800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "MFGR",
"object": "0x152A36C4F40",
"parameter": "3222097540",
"bstr": "NULL"
},
"message": "MFGraph Event End Notify Error Tag=MFGR Object=0x152A36C4F40 Parameter=3222097540 bstr=NULL"
}
Event ID 4372: MFGraph Event Begin Notify License Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4373: MFGraph Event End Notify License Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4374: MFGraph Event Begin Notify Cred Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4375: MFGraph Event End Notify Cred Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4376: MFGraph Event Begin Notify Individualization Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4377: MFGraph Event End Notify Individualization Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4378: MFGraph Event Begin Notify Revocation Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4379: MFGraph Event End Notify Revocation Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4380: MFGraph Event Begin Notify Fullscreen Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4381: MFGraph Event End Notify Fullscreen Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4382: MFGraph Event Begin Notify Custom License Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4383: MFGraph Event End Notify Custom License Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4384: MFGraph Event Begin Notify User Event Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4385: MFGraph Event End Notify User Event Tag=tag Object=object Parameter=parameter bstr=bstr.
#Event ID 4386: Windows Media Player Playback URL=fileName Graph Type=graphType hr=lastHr.
#Message #
Fields #
| Name | Description |
|---|---|
fileName UnicodeString | |
graphType UInt8 | |
lastHr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4386,
"version": 0,
"level": 4,
"task": 545,
"opcode": 0,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.931856400+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fileName": "C:\\Windows\\Media\\ding.wav",
"graphType": "3",
"lastHr": "0x0"
},
"message": "Windows Media Player Playback URL=C:\\Windows\\Media\\ding.wav Graph Type=3 hr=0x0"
}
Event ID 4388: Windows Media Player Playback Queue URL=fileName Graph Type=graphType hr=lastHr.
#Message #
Fields #
| Name | Description |
|---|---|
fileName UnicodeString | |
graphType UInt8 | |
lastHr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4388,
"version": 0,
"level": 4,
"task": 547,
"opcode": 0,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:18:16.848641800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 1300,
"thread_id": 13304
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fileName": "C:\\Windows\\Media\\flourish.mid",
"graphType": "5",
"lastHr": "0x1"
},
"message": "Windows Media Player Playback Queue URL=C:\\Windows\\Media\\flourish.mid Graph Type=5 hr=0x1"
}
Event ID 4389: Windows Media Player Playback ErrorOpen URL=fileName Graph Type=graphType hr=lastHr.
#Message #
Fields #
| Name | Description |
|---|---|
fileName UnicodeString | |
graphType UInt8 | |
lastHr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4389,
"version": 0,
"level": 4,
"task": 548,
"opcode": 0,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.068847200+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 6100
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"fileName": "C:\\Windows\\Media\\ding.wav",
"graphType": "3",
"lastHr": "0xC00D4E84"
},
"message": "Windows Media Player Playback ErrorOpen URL=C:\\Windows\\Media\\ding.wav Graph Type=3 hr=0xC00D4E84"
}
Event ID 4390: Windows Media Player Playback ErrorQueue URL=fileName Graph Type=graphType hr=lastHr.
#Event ID 4391: PEAuthComm BeginAcquireSessionKey Tag=tag Object=object.
#Event ID 4392: PEAuthComm EndAcquireSessionKey Tag=tag Object=object.
#Event ID 4393: PEAuthComm BeginKernelStateInquiry Tag=tag Object=object.
#Event ID 4394: PEAuthComm EndKernelStateInquiry Tag=tag Object=object.
#Event ID 4395: PEAuthComm BeginReloadGRL Tag=tag Object=object.
#Event ID 4396: PEAuthComm EndReloadGRL Tag=tag Object=object.
#Event ID 4397: PEAuthComm BeginRenewSessionKey Tag=tag Object=object.
#Event ID 4398: PEAuthComm EndRenewSessionKey Tag=tag Object=object.
#Event ID 4399: PEAuthComm BeginGetCompList Tag=tag Object=object.
#Event ID 4400: PEAuthComm EndGetCompList Tag=tag Object=object.
#Event ID 4401: Cache Reader Tag=tag Object=object Initial Offset=initialOffset Final Offset=finalOffset Bytes In Cache=bytesInCache Cache Size=cacheSize Sector Size=sectorSize.
#Event ID 4402: Codec DXVA CPUDecodeStart Tag=tag Object=object Frame Index=frameIndex Sample Time=sampleTime.
#Event ID 4403: Codec DXVA CPUDecodeEnd Tag=tag Object=object Frame Index=frameIndex Sample Time=sampleTime.
#Event ID 4404: Codec DXVA GPUDecodeStart Tag=tag Object=object Frame Index=frameIndex Sample Time=sampleTime.
#Event ID 4405: Codec DXVA GPUDecodeEnd Tag=tag Object=object Frame Index=frameIndex Sample Time=sampleTime.
#Event ID 4406: Codec DXVA DisplayStart Tag=tag Object=object Frame Index=frameIndex Sample Time=sampleTime.
#Event ID 4407: Codec DXVA DisplayEnd Tag=tag Object=object Frame Index=frameIndex Sample Time=sampleTime.
#Event ID 4408: ASF Source Begin Start Tag=tag Object=object Parameter=parameter.
#Event ID 4409: ASF Source End Start Tag=tag Object=object Parameter=parameter.
#Event ID 4410: OP Queue Begin Operation Tag=tag Object=object Operation=operation hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
operation Int32 | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4410,
"version": 0,
"level": 4,
"task": 560,
"opcode": 1,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.972779800+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 13564
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "WAVS",
"object": "0x152A346F6B0",
"operation": "1",
"hr": "0x0"
},
"message": "OP Queue Begin Operation Tag=WAVS Object=0x152A346F6B0 Operation=1 hr=0x0"
}
Event ID 4411: OP Queue End Operation Tag=tag Object=object Operation=operation hr=hr.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
operation Int32 | |
hr HexInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4411,
"version": 0,
"level": 4,
"task": 560,
"opcode": 2,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:17.973345200+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "WAVS",
"object": "0x152A346F6B0",
"operation": "1",
"hr": "0x0"
},
"message": "OP Queue End Operation Tag=WAVS Object=0x152A346F6B0 Operation=1 hr=0x0"
}
Event ID 4412: Property Handler Begin Init Tag=tag Object=object Content Type=contentType.
#Event ID 4413: Property Handler End Init Tag=tag Object=object Content Type=contentType.
#Event ID 4414: Property Handler Begin GetValue Tag=tag Object=object Content Type=contentType.
#Event ID 4415: Property Handler End GetValue Tag=tag Object=object Content Type=contentType.
#Event ID 4416: Property Handler Begin SetValue Tag=tag Object=object Content Type=contentType.
#Event ID 4417: Property Handler End SetValue Tag=tag Object=object Content Type=contentType.
#Event ID 4418: Property Handler Begin Commit Tag=tag Object=object Content Type=contentType.
#Event ID 4419: Property Handler End Commit Tag=tag Object=object Content Type=contentType.
#Event ID 4420: Property Handler Begin Init Tag=tag Object=object Content Type=contentType Property Key=propertyKeyGuid fmtID=propertyKeyFmtId.
#Event ID 4421: Property Handler End Init Tag=tag Object=object Content Type=contentType Property Key=propertyKeyGuid fmtID=propertyKeyFmtId.
#Event ID 4422: Property Handler Begin GetValue Tag=tag Object=object Content Type=contentType Property Key=propertyKeyGuid fmtID=propertyKeyFmtId.
#Event ID 4423: Property Handler End GetValue Tag=tag Object=object Content Type=contentType Property Key=propertyKeyGuid fmtID=propertyKeyFmtId.
#Event ID 4424: Property Handler Begin SetValue Tag=tag Object=object Content Type=contentType Property Key=propertyKeyGuid fmtID=propertyKeyFmtId.
#Event ID 4425: Property Handler End SetValue Tag=tag Object=object Content Type=contentType Property Key=propertyKeyGuid fmtID=propertyKeyFmtId.
#Event ID 4426: Property Handler Begin Commit Tag=tag Object=object Content Type=contentType Property Key=propertyKeyGuid fmtID=propertyKeyFmtId.
#Event ID 4427: Property Handler End Commit Tag=tag Object=object Content Type=contentType Property Key=propertyKeyGuid fmtID=propertyKeyFmtId.
#Event ID 4428: Transcode Begin CreateTranscodeTopology Tag=tag Object=object hr=hr.
#Event ID 4429: Transcode End CreateTranscodeTopology Tag=tag Object=object hr=hr.
#Event ID 4430: Field Of Use Begin Validate Tag=tag Object=object hr=hr.
#Event ID 4431: Field Of Use End Validate Tag=tag Object=object hr=hr.
#Event ID 4432: Capture Source Start Tag=tag Object=object Duration=duration.
#Event ID 4433: Capture Source Ready Queue Empty Tag=tag Object=object Duration=duration.
#Event ID 4434: Capture Source Ready Queue Full Tag=tag Object=object Duration=duration.
#Event ID 4435: WorkQueue Execute: Start workqueue_ptr=.
#Event ID 4436: WorkQueue Execute: End workqueue_ptr=.
#Event ID 4439: DXGIBufferUnknown pointer=Buffer guid=GUID unknown=Unknown.
#Event ID 4440: DXGIBufferUnknown pointer=Buffer guid=GUID unknown=Unknown.
#Event ID 4441: 2D Allocate Create: Start pointer=Pointer length=Length type=Type.
#Event ID 4442: 2D Allocate Create: End pointer=Pointer length=Length type=Type.
#Event ID 4443: 2D Allocate Buffer: Start buffer=Pointer parentAlloc=ParentQueuePointer free=Free.
#Event ID 4444: 2D Allocate Buffer: End buffer=Pointer parentAlloc=ParentQueuePointer free=Free.
#Event ID 4445: 2D Allocate Copy: Start Pointer=Pointer Direction=Direction Width=Width Height=Height Format=Format.
#Event ID 4446: 2D Allocate Copy: End Pointer=Pointer Direction=Direction Width=Width Height=Height Format=Format.
#Event ID 4447: Property Handler Start Thumbnail Generation Object=object Content Type=contentType.
#Event ID 4448: Property Handler End Thumbnail Generation Object=object Content Type=contentType.
#Event ID 4449: Property Handler End Thumbnail Generation Best Frame Object=object Content Type=contentType Best Frame Index=bestFrameIndex Total Decoded Frames=totalFrameDecoded Timeout in 100NS=timeoutin100NS is...
#Description
Property Handler End Thumbnail Generation Best Frame Object=object Content Type=contentType Best Frame Index=bestFrameIndex Total Decoded Frames=totalFrameDecoded Timeout in 100NS=timeoutin100NS isTimeout=isTimeout.
Message #
Fields #
| Name | Description |
|---|---|
object Pointer | |
contentType UInt32 | |
bestFrameIndex UInt32 | |
totalFrameDecoded UInt32 | |
timeoutin100NS UInt64 | |
isTimeout Boolean |
Event ID 4450: MFMediaSource video sample received.
#Fields #
| Name | Description |
|---|---|
Sample Pointer | |
StreamIndex UInt32 | |
SampleTimestamp UInt64 | |
AdjustedTimestamp UInt64 |
Event ID 4451: MFMediaSource audio sample received.
#Fields #
| Name | Description |
|---|---|
Sample Pointer | |
StreamIndex UInt32 | |
SampleTimestamp UInt64 | |
AdjustedTimestamp UInt64 |
Event ID 4452: Audio Renderer Buffer Complete Tag=tag Object=object.
#Event ID 4453: Audio Renderer Buffer Retry Tag=tag Object=object.
#Event ID 4454: MMCSS Registration Enter Queue=.
#Event ID 4455: MMCSS Registration Enter Queue=.
#Event ID 4456: Audio Low Latency Tag=tag Object=object Setting=isLowLatency.
#Message #
Fields #
| Name | Description |
|---|---|
tag AnsiString | |
object Pointer | |
isLowLatency Boolean |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-MediaFoundation-Performance",
"guid": "{f404b94e-27e0-4384-bfe8-1d8d390b0aa3}",
"event_source_name": "",
"event_id": 4456,
"version": 0,
"level": 4,
"task": 596,
"opcode": 0,
"keywords": "0x8000000000000000",
"time_created": "2026-07-19T04:17:18.053685500+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 10564,
"thread_id": 4036
},
"channel": "MediaFoundationPerformance",
"computer": "",
"security": {
"user_id": ""
}
},
"event_data": {
"tag": "ARen",
"object": "0x152A36E7310",
"isLowLatency": "false"
},
"message": "Audio Low Latency Tag=ARen Object=0x152A36E7310 Setting=false"
}
Event ID 4457: MFMediaSource sample dropped.
#Fields #
| Name | Description |
|---|---|
object Pointer | |
StreamIndex UInt32 | |
SampleTimestamp UInt64 |
Event ID 4458: Audio Renderer Glitch Tag=tag Object object ByteCount=byteCount TotalByteCount=totalByteCount.
#Event ID 4459: Audio Renderer Work Item Canceled Tag=tag Object object IsRetry=isRetryWorkItem.
#Event ID 4460: DXGI Map Enter Surface=surface subresrouce=uSubresource type=Type flags=Flags.
#Event ID 4462: Audio Renderer: IsLostingHardwareResrouce=isLosigHardwareResource.
#Event ID 4463: Audio Renderer: Dynamic format change request =IsGoingOn.
#Event ID 4464: Audio Renderer: Sound level changed = SoundLevel.
#Event ID 4465: Audio Renderer: Release stream resource = status.
#Message #
Fields #
| Name | Description |
|---|---|
status Boolean | NTSTATUS reference |
Event ID 4466: Audio Buffer Duration Tag=tag Object=object Setting=BufferDuration.
#Event ID 4467: CopyImage Enter Src=SrcPtr Dst=DstPtr Width=Width Height=Height.
#Event ID 4468: CopyImage Leave Src=SrcPtr Dst=DstPtr ReturnCode=ReturnCode PathTaken=PathTaken.
#Event ID 4471: MFMediaDeviceStream SendSinglePhotoTriggerToKS Event
#Fields #
| Name | Description |
|---|---|
object Pointer | |
dwStreamID UInt32 | |
uiPinID UInt32 |
Event ID 4472: 2D Allocate Flush: Allocator=Object Sample=Sample Free=Free Allocated=Allocated.
#Event ID 4473: Attributes_CopyAllItems_Start Src=SrcPtr Count=Count Dst=DstPtr.
#Event ID 4474: Attributes_CopyAllItems_Stop Src=SrcPtr Hresult=HResult.
#Event ID 4475: DXGI Map Sleep Enter Surface=surface.
#Event ID 4476: DXGI Map Sleep Leave Surface=surface.
#Event ID 4477: DXGI Unmap Enter Surface=surface subresource=uSubresource.
#Event ID 4483: DXGISetPriority
#Fields #
| Name | Description |
|---|---|
Manager Pointer | |
Device Pointer | |
Changed Boolean | |
Priority Int32 | |
hr HexInt32 |
Event ID 4500: NetworkRIO_PendingSends_Update: Object=Object PendingCount=PendingCount Bytes=BytesSent.
#Event ID 4501: NetworkRIO_PendingSends_Start: Object=Object PendingCount=PendingCount Bytes=BytesSent.
#Event ID 4502: NetworkRIO_PendingSends_Stop: Object=Object PendingCount=PendingCount Bytes=BytesSent.
#Event ID 4503: NetworkRIO_PendingReceives_Update: Object=Object PendingCount=PendingReceives Bytes=BytesReceived.
#Event ID 4504: NetworkRIO_PendingReceives_Start: Object=Object PendingCount=PendingReceives Bytes=BytesReceived.
#Event ID 4505: NetworkRIO_PendingReceives_Start: Object=Object PendingCount=PendingReceives Bytes=BytesReceived.
#Event ID 4600: MFContentProtectionDeviceCreate_Start system system.
#Event ID 4602: MFIsContentProtectionDeviceSupported_Start system system.
#Event ID 4603: MFIsContentProtectionDeviceSupported_Stop available available, hr hrResult.
#Event ID 4604: MFContentProtectionDeviceCall_Start object object.
#Event ID 4605: MFContentProtectionDeviceCall_End object object, functionID functionID, input bytes inputbytes, output bytes outputbytes, TransportTime msTransportTimems, ExecutionTime msExecutionTimems, TotalTime...
#Description
MFContentProtectionDeviceCall_End object object, functionID functionID, input bytes inputbytes, output bytes outputbytes, TransportTime msTransportTimems, ExecutionTime msExecutionTimems, TotalTime msTotalms, hr hrResult.
Message #
Fields #
| Name | Description |
|---|---|
object Pointer | |
functionID UInt32 | |
inputbytes UInt32 | |
outputbytes UInt32 | |
msTransportTime UInt32 | |
msExecutionTime UInt32 | |
msTotal UInt32 | |
hrResult UInt32 |
Event ID 4606: MFContentDecryptorContextCreate system system, D3D manager.
#Event ID 4607: MFContentDecryptorContextCreate object object, hr hrResult.
#Event ID 4608: MFContentDecryptorContextInitializeKey object object, hr hrResult.
#Event ID 4609: EnsureTrustStart
#Event ID 4610: EnsureTrustStop
#Event ID 4611: AddDecryptorStart
#Event ID 4613: PreparePresentationStart
#Event ID 4615: MFMediaSink wrote a packet to storage
#Fields #
| Name | Description |
|---|---|
object Pointer | |
bytestowrite UInt32 |
Event ID 4616: MFMediaSink wrote a packet to storage
#Fields #
| Name | Description |
|---|---|
object Pointer | |
byteswritten UInt32 | |
hrResult UInt32 |
Event ID 4617: MFTDriver ProcessInput
#Fields #
| Name | Description |
|---|---|
object Pointer | |
StreamIndex UInt32 | |
StreamType UInt32 | |
timestamp Int64 | |
sample Pointer | |
duration Int64 |
Event ID 4618: MFTDriver ProcessInput
#Fields #
| Name | Description |
|---|---|
object Pointer | |
StreamIndex UInt32 | |
hrResult UInt32 |
Event ID 4621: MFTDriver ProcessOutput
#Fields #
| Name | Description |
|---|---|
object Pointer | |
StreamIndex UInt32 | |
StreamType UInt32 | |
timestamp Int64 | |
sample Pointer | |
duration Int64 |
Event ID 4623: MFTWICDecoderProxyActivationStop
#Fields #
| Name | Description |
|---|---|
object Pointer | |
MFTobject Pointer | |
hrResult UInt32 |
Event ID 4625: MFTWICDecoderProxyGetPreviewStop
#Fields #
| Name | Description |
|---|---|
object Pointer | |
BitmapSourceProxyobject Pointer | |
hrResult UInt32 |
Event ID 4627: MFTWICDecoderProxyGetThumbnailStop
#Fields #
| Name | Description |
|---|---|
object Pointer | |
BitmapSourceProxyobject Pointer | |
hrResult UInt32 |
Event ID 4629: MFTWICDecoderProxyGetFrameStop
#Fields #
| Name | Description |
|---|---|
object Pointer | |
BitmapSourceProxyobject Pointer | |
hrResult UInt32 |
Event ID 4630: MFTWICBitmapSourceProxyGetThumbnailStart
#Fields #
| Name | Description |
|---|---|
object Pointer | |
FrameIndex UInt32 |
Event ID 4631: MFTWICBitmapSourceProxyGetThumbnailStop
#Fields #
| Name | Description |
|---|---|
object Pointer | |
BitmapSourceProxyobject Pointer | |
hrResult UInt32 |
Provenance
ETW provider GUID f404b94e-27e0-4384-bfe8-1d8d390b0aa3
Defined in mfplat.dll, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.4768, captured 2026-06-02 — Manifest XML pack, 2.0 MB
- JD-WIN11-22H2-1-native-20260719, sample captured from a live trace, binary version 10.0.22621.1, captured 2026-07-19
Native ETL capture of controlled Windows Media Foundation audio playback workloads; identifiers were sanitized in catalog examples.