detection.wiki

Microsoft-Windows-WinHttp-Pca

EventTitleChannelSampleRule
0The WinHttp TLS handshake failed with version mismatch errorMicrosoft-Windows-WinHttp-PcaNN

Event ID 0: The WinHttp TLS handshake failed with version mismatch error

#
Channel
Microsoft-Windows-WinHttp-Pca
Opcode
Info

Fields #

NameDescription
ProcessName UnicodeString
ProcessPath UnicodeString
ModuleName UnicodeString
ModulePath UnicodeString

Provenance

ETW provider GUID d071ce03-0d7b-5b27-e817-b9c12961934e

Defined in winhttp.dll, which carries the event manifest.

  • WS2022-20348.4893, schema read from the registered manifest, binary version 10.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
  • Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB