Microsoft-Windows-PDFReader
228 events across 3 channels
Event ID 1: Loading File
#Event ID 2: Unhandled Exception
#Event ID 18: Done with Embedding Profile on Image
#Description
Done with Embedding Profile on Image.
Message #
Event ID 19: Start Applying Decoded Array on Image Stream
#Description
Start Applying Decoded Array on Image Stream.
Message #
Event ID 20: Done with the Applying Decoded Array on Image Stream
#Description
Done with the Applying Decoded Array on Image Stream.
Message #
Event ID 21: Start Applying dct Decoded Array on DCT Image Stream
#Description
Start Applying dct Decoded Array on DCT Image Stream.
Message #
Event ID 22: Done with Applying dct Decoded Array on DCT Image Stream
#Description
Done with Applying dct Decoded Array on DCT Image Stream.
Message #
Event ID 35: Exception Information
#Event ID 44: Building page
#Event ID 45: Page building completed
#Event ID 58: Trigger Change Layout: Start
#Event ID 60: CHange Layout: Start
#Event ID 62: Step Zoom: Start
#Event ID 64: Smooth Zoom: Start
#Event ID 68: Normal Tile Render: Start
#Event ID 70: CommandBar : Show Start
#Event ID 71: CommandBar : Show Stop
#Event ID 72: CommandBar : Hide Start
#Event ID 73: CommandBar : Hide Stop
#Event ID 74: Rotate Pages Start
#Event ID 75: Rotate Pages Stop
#Event ID 88: Zoom Range Updated
#Event ID 91: Unexpected content in Type 1 non-CFF font
#Event ID 92: Unsupported feature
#Event ID 93: Encountered duplicate value in CFF Font Stream
#Event ID 94: ToUnicodeCMap Error
#Event ID 95: Form Control Creation
#Event ID 96: Type3 Parse Error skipped
#Event ID 97: App Mode Entered
#Event ID 98: App Mode Exited
#Event ID 99: PageRender: Start
#Event ID 100: PageRender: Stop
#Event ID 101: Launched URI
#Event ID 102: Inputs logged for Type4 Function evaluation
#Event ID 103: Outputs logged for Type4 Function evaluation
#Event ID 104: Property not found in digital certificate
#Event ID 105: Error occurred in digital signatures intialization
#Description
Error occurred in digital signatures intialization.
Message #
Event ID 106: Add summary pane item
#Event ID 107: Page Async Print: Start
#Event ID 109: Save/SaveAs Entered
#Event ID 110: Save/SaveAs Exited
#Event ID 111: Initiating Highlight Create
#Event ID 113: View Manipulation Start
#Event ID 114: View Manipulation Stop
#Event ID 115: Reader Flyout Show
#Event ID 116: Reader Flyout Hide
#Event ID 117: Glyph Name does not conform to specification
#Event ID 118: Start loading form fields information from file
#Description
Start loading form fields information from file.
Message #
Event ID 119: Stop loading form fields information from file
#Description
Stop loading form fields information from file.
Message #
Event ID 120: Exception Handled Gracefully
#Event ID 130: Start Word Selection
#Event ID 131: Start Word Selection
#Event ID 134: Embedded font zero ascent and descent values are handled
#Event ID 135: Ascent and Descent values of font descriptor are zeroes
#Event ID 136: Descent value in the font descriptor is positive
#Event ID 137: Page Async Print Preview: Start
#Event ID 139: Font Descriptor Flags are invalid
#Event ID 140: Starting scrolling to destination
#Description
Starting scrolling to destination.
Message #
Event ID 141: Done with scrolling to destination
#Description
Done with scrolling to destination.
Message #
Event ID 142: Highlight Created
#Event ID 153: Content ignored in Type 1 non-CFF font
#Event ID 154: Invalid Width Information present
#Event ID 157: Unsupported Page Element Block
#Event ID 158: Embedded Font Stream type is invalid in FontDictionary of subtype.
#Event ID 163: PageView Info.
#Event ID 166: Page Resources Update : Start
#Event ID 167: Page Resources Update : Stop
#Event ID 170: Start copying rendered content to Drawing Surface
#Description
Start copying rendered content to Drawing Surface.
Message #
Event ID 171: Stop copying rendered content to Drawing Surface
#Event ID 172: Received manipulation delta
#Event ID 179: Reader Dialog Show
#Event ID 180: Reader Dialog Hide
#Event ID 181: Stylus Down Event
#Event ID 182: Stylus Move Event
#Event ID 183: Stylus Up Event
#Event ID 191: Started processing View Update request
#Description
Started processing View Update request.
Message #
Event ID 192: Start Drawingsurface render callback
#Description
Start Drawingsurface render callback.
Message #
Event ID 193: Stop Drawingsurface render callback
#Description
Stop Drawingsurface render callback.
Message #
Event ID 199: XAML Unhandled Exception
#Event ID 200: PageView data context has been initialized
#Event ID 201: Semantic zoom view change started
#Event ID 202: Semantic zoom view change completed
#Event ID 203: Selected a file in the open picker
#Description
Selected a file in the open picker.
Message #
Event ID 204: Selected a file in the save as picker
#Description
Selected a file in the save as picker.
Message #
Event ID 206: Form, ink or highlight control deleted
#Description
Form, ink or highlight control deleted.
Message #
Event ID 209: A jump to a destination has been triggered
#Description
A jump to a destination has been triggered.
Message #
Event ID 210: Zoom updated
#Event ID 216: Form, ink or highlight control render start
#Event ID 217: Form, ink or highlight control render stop
#Description
Form, ink or highlight control render stop.
Message #
Event ID 218: Render Tile Request Created
#Event ID 219: Sezo Static Thumbnail Cached
#Event ID 220: Sezo Static Thumbnail Deleted
#Event ID 221: Sezo Thumbnail Cached
#Event ID 222: Sezo Thumbnail Deleted
#Event ID 224: A view has been pushed to view backstack
#Description
A view has been pushed to view backstack.
Message #
Event ID 225: Page Element Render Tile Request Created
#Event ID 226: Unsupported DOM object accessed in javascript code.
#Event ID 227: Document Layout updated from Javascript
#Event ID 228: Mouse Enter trigger event
#Event ID 229: Mouse Exit trigger event
#Event ID 230: Mouse Up trigger event
#Event ID 231: Mouse Down trigger event
#Event ID 232: Field Validate trigger event
#Event ID 233: Field Calculate trigger event
#Event ID 234: Field Keystroke trigger event
#Event ID 235: Field Format trigger event
#Event ID 236: Focus trigger event
#Event ID 237: Blur trigger event
#Event ID 238: Page Open trigger event
#Event ID 239: Page Close trigger event
#Event ID 240: SeZo Thumbnail Request Created
#Event ID 241: SeZo Tile Render Request in progress
#Event ID 247: Invalid write on Readonly property in javascript code.
#Event ID 248: Flat Tile Render: Start
#Event ID 250: Switching To Document.
#Event ID 251: SwitchTo Document: Start
#Event ID 253: Tile Request Cancelled
#Event ID 254: Visible Rect for a page in docview
#Event ID 255: Scroll Viewer ViewChangeCompleted
#Description
Scroll Viewer ViewChangeCompleted.
Message #
Event ID 256: Javascript Execution started
#Event ID 257: Javascript Execution finished
#Event ID 258: Signature verification started
#Event ID 259: Signature verification completed
#Event ID 260: Certificate verification started
#Event ID 261: Certificate verification completed
#Event ID 262: Digital Signatures and Certificates verifications are now completed
#Description
Digital Signatures and Certificates verifications are now completed.
Message #
Event ID 263: Digital Signature Message Box is visible now
#Description
Digital Signature Message Box is visible now.
Message #
Event ID 264: MailDoc invoked via document javascript
#Event ID 270: An animation for word snapping has been triggered
#Description
An animation for word snapping has been triggered.
Message #
Event ID 272: VSIS UpdatesNeeded Callback
#Event ID 274: New Window Created
#Event ID 278: Window Close started
#Event ID 279: Window closed
#Event ID 280: ContextMenuShow : Show
#Event ID 281: ContextMenuHide : Hide
#Event ID 282: MRU Pane Show
#Event ID 283: MRU Pane Hide
#Event ID 284: Ink Annotation Rendering Completed.
#Description
Ink Annotation Rendering Completed.
Message #
Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID dfa86faa-2c55-4140-bff9-5cc586217a7b
Defined in Windows.Data.Pdf.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02