detection.wiki

Microsoft-Windows-Photo-Image-Codec

EventTitleChannelSampleRule
0WMPHOTO_Decoder_DecoderFrameCopyPixelsCoreStartWINDOWS_WMPHOTO_CHANNELNN
1WMPHOTO_Decoder_DecoderFrameCopyPixelsCoreStopWINDOWS_WMPHOTO_CHANNELNN
2WMPHOTO_Decoder_DecoderFrameDecodeImageStartWINDOWS_WMPHOTO_CHANNELNN
3WMPHOTO_Decoder_DecoderFrameDecodeImageStopWINDOWS_WMPHOTO_CHANNELNN
4WMPHOTO_Encoder_EncoderFrameEncodeFrameStartWINDOWS_WMPHOTO_CHANNELNN
5WMPHOTO_Encoder_EncoderFrameEncodeFrameStopWINDOWS_WMPHOTO_CHANNELNN
6WMPHOTO_Encoder_EncoderFrameEncodeStreamStartWINDOWS_WMPHOTO_CHANNELNN
7WMPHOTO_Encoder_EncoderFrameEncodeStreamStopWINDOWS_WMPHOTO_CHANNELNN
8WMPHOTO_Decoder_ReducedResolution_InfoWINDOWS_WMPHOTO_CHANNELNN
9WMPHOTO_Encoder_EncodeThumbnail_InfoWINDOWS_WMPHOTO_CHANNELNN
10WMPHOTO_Decoder_FrameParamsSource_InfoWINDOWS_WMPHOTO_CHANNELNN
11WMPHOTO_Decoder_FrameParamsTransform_InfoWINDOWS_WMPHOTO_CHANNELNN
12WMPHOTO_Encoder_FrameParams_InfoWINDOWS_WMPHOTO_CHANNELNN
13WMPHOTO_Transcoder_TranscodeParams_InfoWINDOWS_WMPHOTO_CHANNELNN

Event ID 0: WMPHOTO_Decoder_DecoderFrameCopyPixelsCoreStart

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Decoder_DecoderFrameCopyPixelsCore
Opcode
Start

Event ID 1: WMPHOTO_Decoder_DecoderFrameCopyPixelsCoreStop

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Decoder_DecoderFrameCopyPixelsCore
Opcode
Stop

Event ID 2: WMPHOTO_Decoder_DecoderFrameDecodeImageStart

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Decoder_DecoderFrameDecodeImage
Opcode
Start

Event ID 3: WMPHOTO_Decoder_DecoderFrameDecodeImageStop

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Decoder_DecoderFrameDecodeImage
Opcode
Stop

Event ID 4: WMPHOTO_Encoder_EncoderFrameEncodeFrameStart

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Encoder_EncoderFrameEncodeFrame
Opcode
Start

Event ID 5: WMPHOTO_Encoder_EncoderFrameEncodeFrameStop

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Encoder_EncoderFrameEncodeFrame
Opcode
Stop

Event ID 6: WMPHOTO_Encoder_EncoderFrameEncodeStreamStart

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Encoder_EncoderFrameEncodeStream
Opcode
Start

Event ID 7: WMPHOTO_Encoder_EncoderFrameEncodeStreamStop

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Encoder_EncoderFrameEncodeStream
Opcode
Stop

Event ID 8: WMPHOTO_Decoder_ReducedResolution_Info

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Decoder_ReducedResolution_Info

Fields #

NameDescription
Ratio UInt32

Event ID 9: WMPHOTO_Encoder_EncodeThumbnail_Info

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Encoder_EncodeThumbnail_Info

Event ID 10: WMPHOTO_Decoder_FrameParamsSource_Info

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Decoder_FrameParamsSource_Info

Fields #

NameDescription
Width UInt32
Height UInt32
Orientation UInt8

Event ID 11: WMPHOTO_Decoder_FrameParamsTransform_Info

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Decoder_FrameParamsTransform_Info

Fields #

NameDescription
ROIWidth Int32
ROIHeight Int32
ROIX Int32
ROIY Int32
OutWidth UInt32
OutHeight UInt32
Orientation UInt8

Event ID 12: WMPHOTO_Encoder_FrameParams_Info

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Encoder_FrameParams_Info

Fields #

NameDescription
Width UInt32
Height UInt32
Subband UInt8
BitStreamFormat UInt8
Orientation UInt8
IgnoreOverlap UInt8
DiscardAlpha UInt8

Event ID 13: WMPHOTO_Transcoder_TranscodeParams_Info

#
Channel
WINDOWS_WMPHOTO_CHANNEL
Task
WMPHOTO_Transcoder_TranscodeParams_Info

Fields #

NameDescription
ROIWidth Int32
ROIHeight Int32
ROIX Int32
ROIY Int32
Subband UInt8
BitStreamFormat UInt8
Orientation UInt8
IgnoreOverlap UInt8
DiscardAlpha UInt8

Provenance

ETW provider GUID be3a31ea-aa6c-4196-9dcc-9ca13a49e09f

Defined in wmphoto.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB