Microsoft-Windows-USB-UCX
75 events across 1 channel
Event ID 3: UCX Controller Information
#Description
UCX Controller Information.
Message #
Fields #
| Name | Description |
|---|---|
fid_UcxController Pointer | |
fid_ParentBusType UInt32 | |
fid_PciBus UInt32 | |
fid_PciDevice UInt32 | |
fid_PciFunction UInt32 | |
fid_PciVendorId UInt32 | |
fid_PciDeviceId UInt32 | |
fid_PciRevisionId UInt32 | |
fid_AcpiVendorId AnsiString | |
fid_AcpiDeviceId AnsiString | |
fid_AcpiRevisionId AnsiString | |
fid_DeviceInterfacePath UnicodeString |
Event ID 4: UCX RootHub Information
#Event ID 5: UCX Device Information
#Event ID 6: UCX Endpoint Information
#Event ID 7: UCX Static Stream Information
#Event ID 8: UCX Controller Create
#Description
UCX Controller Create.
Message #
Fields #
| Name | Description |
|---|---|
fid_UcxController Pointer | |
fid_ParentBusType UInt32 | |
fid_PciBus UInt32 | |
fid_PciDevice UInt32 | |
fid_PciFunction UInt32 | |
fid_PciVendorId UInt32 | |
fid_PciDeviceId UInt32 | |
fid_PciRevisionId UInt32 | |
fid_AcpiVendorId AnsiString | |
fid_AcpiDeviceId AnsiString | |
fid_AcpiRevisionId AnsiString | |
fid_DeviceInterfacePath UnicodeString |
Event ID 9: UCX Controller Delete
#Description
UCX Controller Delete.
Message #
Fields #
| Name | Description |
|---|---|
fid_UcxController Pointer | |
fid_ParentBusType UInt32 | |
fid_PciBus UInt32 | |
fid_PciDevice UInt32 | |
fid_PciFunction UInt32 | |
fid_PciVendorId UInt32 | |
fid_PciDeviceId UInt32 | |
fid_PciRevisionId UInt32 | |
fid_AcpiVendorId AnsiString | |
fid_AcpiDeviceId AnsiString | |
fid_AcpiRevisionId AnsiString | |
fid_DeviceInterfacePath UnicodeString |
Event ID 10: UCX RootHub Create
#Event ID 11: UCX RootHub Delete
#Event ID 12: UCX RootHub Prepare Hardware
#Event ID 13: UCX RootHub Release Hardware
#Event ID 14: UCX Device Create
#Event ID 15: UCX Device Delete
#Event ID 16: UCX Endpoint Create
#Event ID 17: UCX Endpoint Delete
#Event ID 18: UCX Static Stream Create
#Event ID 19: UCX Static Stream Delete
#Event ID 20: Dispatch URB_FUNCTION_CONTROL_TRANSFER
#Event ID 21: Complete URB_FUNCTION_CONTROL_TRANSFER
#Event ID 22: Complete URB_FUNCTION_CONTROL_TRANSFER with data
#Description
Complete URB_FUNCTION_CONTROL_TRANSFER with data.
Message #
Fields #
| Name | Description |
|---|---|
fid_UcxController Pointer | |
fid_UsbDevice Pointer | |
fid_PipeHandle Pointer | |
fid_IRP_Ptr Pointer | |
fid_URB_Ptr Pointer | |
fid_UCX_URB_CONTROL_TRANSFER Int64 | |
fid_IRP_NtStatus UInt32 | |
fid_URB_TransferDataLength UInt16 | |
fid_URB_TransferData UInt8 |
Event ID 23: Dispatch URB_FUNCTION_CONTROL_TRANSFER_EX
#Event ID 24: Complete URB_FUNCTION_CONTROL_TRANSFER_EX
#Event ID 25: Complete URB_FUNCTION_CONTROL_TRANSFER_EX with data
#Description
Complete URB_FUNCTION_CONTROL_TRANSFER_EX with data.
Message #
Fields #
| Name | Description |
|---|---|
fid_UcxController Pointer | |
fid_UsbDevice Pointer | |
fid_PipeHandle Pointer | |
fid_IRP_Ptr Pointer | |
fid_URB_Ptr Pointer | |
fid_UCX_URB_CONTROL_TRANSFER_EX Int64 | |
fid_IRP_NtStatus UInt32 | |
fid_URB_TransferDataLength UInt16 | |
fid_URB_TransferData UInt8 |
Event ID 26: Dispatch URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER
#Event ID 27: Complete URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER
#Event ID 28: Complete URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER with partial data
#Description
Complete URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER with partial data.
Message #
Fields #
| Name | Description |
|---|---|
fid_UcxController Pointer | |
fid_UsbDevice Pointer | |
fid_PipeHandle Pointer | |
fid_IRP_Ptr Pointer | |
fid_URB_Ptr Pointer | |
fid_UCX_URB_BULK_OR_INTERRUPT_TRANSFER Int64 | |
fid_IRP_NtStatus UInt32 | |
fid_URB_TransferDataLength UInt16 | |
fid_URB_TransferData UInt8 |
Event ID 29: Complete URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER with full data
#Description
Complete URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER with full data.
Message #
Fields #
| Name | Description |
|---|---|
fid_UcxController Pointer | |
fid_UsbDevice Pointer | |
fid_PipeHandle Pointer | |
fid_IRP_Ptr Pointer | |
fid_URB_Ptr Pointer | |
fid_UCX_URB_BULK_OR_INTERRUPT_TRANSFER Int64 | |
fid_IRP_NtStatus UInt32 | |
fid_URB_TransferDataLength UInt16 | |
fid_URB_TransferData UInt8 |
Event ID 30: Dispatch URB_FUNCTION_ISOCH_TRANSFER
#Event ID 31: Complete URB_FUNCTION_ISOCH_TRANSFER
#Description
Complete URB_FUNCTION_ISOCH_TRANSFER.
Message #
Fields #
| Name | Description |
|---|---|
fid_UcxController Pointer | |
fid_UsbDevice Pointer | |
fid_PipeHandle Pointer | |
fid_IRP_Ptr Pointer | |
fid_URB_Ptr Pointer | |
fid_UCX_URB_NumberOfPackets UInt16 | |
fid_UCX_URB_ISOCH_TRANSFER Int64 | |
fid_UCX_URB_ISO_PACKETS Struct | |
fid_IRP_NtStatus UInt32 |
Event ID 32: Complete URB_FUNCTION_ISOCH_TRANSFER with partial data
#Description
Complete URB_FUNCTION_ISOCH_TRANSFER with partial data.
Message #
Fields #
| Name | Description |
|---|---|
fid_UcxController Pointer | |
fid_UsbDevice Pointer | |
fid_PipeHandle Pointer | |
fid_IRP_Ptr Pointer | |
fid_URB_Ptr Pointer | |
fid_UCX_URB_NumberOfPackets UInt16 | |
fid_UCX_URB_ISOCH_TRANSFER Float | |
fid_UCX_URB_ISO_PACKETS 26 | |
fid_IRP_NtStatus UInt32 | |
fid_URB_TransferDataLength UInt16 | |
fid_URB_TransferData UInt8 |
Event ID 33: Complete URB_FUNCTION_ISOCH_TRANSFER with full data
#Description
Complete URB_FUNCTION_ISOCH_TRANSFER with full data.
Message #
Fields #
| Name | Description |
|---|---|
fid_UcxController Pointer | |
fid_UsbDevice Pointer | |
fid_PipeHandle Pointer | |
fid_IRP_Ptr Pointer | |
fid_URB_Ptr Pointer | |
fid_UCX_URB_NumberOfPackets UInt16 | |
fid_UCX_URB_ISOCH_TRANSFER Float | |
fid_UCX_URB_ISO_PACKETS 26 | |
fid_IRP_NtStatus UInt32 | |
fid_URB_TransferDataLength UInt16 | |
fid_URB_TransferData UInt8 |
Event ID 34: Dispatch URB_FUNCTION_GET_DESCRIPTOR_FROM_DEVICE
#Event ID 35: Dispatch URB_FUNCTION_GET_DESCRIPTOR_FROM_INTERFACE
#Event ID 36: Dispatch URB_FUNCTION_GET_DESCRIPTOR_FROM_ENDPOINT
#Event ID 37: Dispatch URB_FUNCTION_SET_DESCRIPTOR_TO_DEVICE
#Event ID 38: Dispatch URB_FUNCTION_SET_DESCRIPTOR_TO_INTERFACE
#Event ID 39: Dispatch URB_FUNCTION_SET_DESCRIPTOR_TO_ENDPOINT
#Event ID 40: Dispatch URB_FUNCTION_SET_FEATURE_TO_DEVICE
#Event ID 41: Dispatch URB_FUNCTION_SET_FEATURE_TO_INTERFACE
#Event ID 42: Dispatch URB_FUNCTION_SET_FEATURE_TO_ENDPOINT
#Event ID 43: Dispatch URB_FUNCTION_SET_FEATURE_TO_OTHER
#Event ID 44: Dispatch URB_FUNCTION_CLEAR_FEATURE_TO_DEVICE
#Event ID 45: Dispatch URB_FUNCTION_CLEAR_FEATURE_TO_INTERFACE
#Event ID 46: Dispatch URB_FUNCTION_CLEAR_FEATURE_TO_ENDPOINT
#Event ID 47: Dispatch URB_FUNCTION_CLEAR_FEATURE_TO_OTHER
#Event ID 48: Dispatch URB_FUNCTION_GET_STATUS_FROM_DEVICE
#Event ID 49: Dispatch URB_FUNCTION_GET_STATUS_FROM_INTERFACE
#Event ID 50: Dispatch URB_FUNCTION_GET_STATUS_FROM_ENDPOINT
#Event ID 51: Dispatch URB_FUNCTION_GET_STATUS_FROM_OTHER
#Event ID 52: Dispatch URB_FUNCTION_CLASS_DEVICE
#Event ID 53: Dispatch URB_FUNCTION_CLASS_INTERFACE
#Event ID 54: Dispatch URB_FUNCTION_CLASS_ENDPOINT
#Event ID 55: Dispatch URB_FUNCTION_CLASS_OTHER
#Event ID 56: Dispatch URB_FUNCTION_VENDOR_DEVICE
#Event ID 57: Dispatch URB_FUNCTION_VENDOR_INTERFACE
#Event ID 58: Dispatch URB_FUNCTION_VENDOR_ENDPOINT
#Event ID 59: Dispatch URB_FUNCTION_VENDOR_OTHER
#Event ID 60: Dispatch URB_FUNCTION_GET_CONFIGURATION
#Event ID 61: Dispatch URB_FUNCTION_GET_INTERFACE
#Event ID 62: Dispatch URB_FUNCTION_GET_MS_FEATURE_DESCRIPTOR
#Event ID 63: Endpoint State Machine Transition
#Event ID 64: Endpoint State Machine Event
#Event ID 65: Rundown Endpoint State Machine Transition
#Event ID 66: Rundown Endpoint State Machine Event
#Event ID 67: Controller State Machine Transition
#Event ID 68: Controller State Machine Event
#Event ID 69: Rundown Controller State Machine Transition
#Event ID 70: Rundown Controller State Machine Event
#Event ID 71: UCX RootHub Initiating Wake
#Event ID 72: Dispatch URB_FUNCTION_SECURE_BULK_OR_INTERRUPT_TRANSFER
#Event ID 73: Complete URB_FUNCTION_SECURE_BULK_OR_INTERRUPT_TRANSFER
#Event ID 74: Dispatch URB_FUNCTION_SECURE_ISOCH_TRANSFER
#Description
Dispatch URB_FUNCTION_SECURE_ISOCH_TRANSFER.
Message #
Fields #
| Name | Description |
|---|---|
fid_UcxController Pointer | |
fid_UsbDevice Pointer | |
fid_PipeHandle Pointer | |
fid_IRP_Ptr Pointer | |
fid_URB_Ptr Pointer | |
fid_UCX_URB_NumberOfPackets UInt16 | |
fid_UCX_URB_SECURE_ISOCH_TRANSFER UInt32 | |
fid_UCX_URB_ISO_PACKETS CountedUtf16String |
Event ID 75: Complete URB_FUNCTION_SECURE_ISOCH_TRANSFER
#Description
Complete URB_FUNCTION_SECURE_ISOCH_TRANSFER.
Message #
Fields #
| Name | Description |
|---|---|
fid_UcxController Pointer | |
fid_UsbDevice Pointer | |
fid_PipeHandle Pointer | |
fid_IRP_Ptr Pointer | |
fid_URB_Ptr Pointer | |
fid_UCX_URB_NumberOfPackets UInt16 | |
fid_UCX_URB_SECURE_ISOCH_TRANSFER Int64 | |
fid_UCX_URB_ISO_PACKETS CountedMbcsString | |
fid_IRP_NtStatus UInt32 |
Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 36da592d-e43a-4e28-af6f-4bc57c5a11e8
Defined in ucx01000.sys, the binary that emits these events.
Observed on:
- WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.4297, captured 2026-06-02
- Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02