Microsoft-Windows-WinINet

330 events across 3 channels

Event	Title	Channel	Sample
101	Session handle HINTERNET created: UserAgent=UserAgent, AccessType=AccessType, …	Analytic	N
102	Handle ConnectionHandle created by InternetOpenURL: …	Analytic	N
103	Handle ConnectionHandle created by InternetConnect: SessionHandle=ParentHandle, …	Analytic	N
104	Request handle ConnectionHandle created by HttpOpenRequest: …	Analytic	N
105	Handle HINTERNET closed successfully.	Analytic	N
106	Failed to create handle: ParentHandle=HINTERNET, Error=Error.	Analytic	N
107	Handle HINTERNET failed to close: Error=Error.	Analytic	N
108	Request handle ConnectionHandle Server Details: Server=ServerName …	Analytic	N
200	HTTP request was received from API: RequestHandle=HINTERNET.	Analytic	N
201	HTTP request was sent successfully: RequestHandle=RequestHandle, …	Analytic	N
202	HTTP request send failed: Handle=Handle, Error=Error.	Analytic	N
203	HTTP response (ResponseCode) received: RequestHandle=RequestHandle, …	Analytic	N
204	HTTP response failed: Handle=Handle, Error=Error.	Analytic	N
205	HTTP connection (Handle=ConnectionHandle, SocketHandle=SocketHandle) closed due …	Analytic	N
206	Keep-alive connection is re-used: ConnectionHandle=ConnectionHandle, …	Analytic	N
207	Connection is returned to keep-alive pool: RequestHandle=ConnectionHandle, …	Analytic	N
208	Keep-alive connection is closed: ConnectionHandle=ConnectionHandle, …	Analytic	N
209	HTTP response entity body received: RequestHandle=RequestHandle.	Analytic	N
210	HTTP Request Headers RequestHandle=RequestHandle Headers.	Analytic	N
211	HTTP Response Headers RequestHandle=RequestHandle Headers.	Analytic	N
212	HTTP Request Headers OptionalData RequestHandle=RequestHandle Headers.	Analytic	N
213	WinInet::Http response entity body receive failed: Request Handle=RequestHandle, …	Analytic	N
301	TCP connection to server ServerName established: …	Analytic	N
302	TCP connection to ServerName for connection handle ConnectionHandle failed: …	Analytic	N
303	TCP connection closed successfully: SocketHandle=SocketHandle.	Analytic	N
304	DNS query for HostName hostname is sent: Handle=RequestHandle.	Analytic	N
305	DNS query for HostName hostname is complete: Handle=RequestHandle, …	Analytic	N
306	DNS query for HostName hostname failed: Handle=RequestHandle Error=Error.	Analytic	N
307	Re-used DNS cache, query for HostName hostname is complete: …	Analytic	N
308	A network change was detected: Handle=Handle.	Analytic	N
400	Wininet_WebSocketUpgrade	WebSocket	N
401	Wininet_WebSocketUpgrade401	WebSocket	N
402	Wininet_WebSocketSessionStart	WebSocket	N
403	Wininet_WebSocketSessionStop	WebSocket	N
404	Wininet_WebSocketSession	WebSocket	N
405	Wininet_WebSocketSession405	WebSocket	N
406	Wininet_WebSocketSession406	WebSocket	N
407	Wininet_WebSocketSession407	WebSocket	N
408	Wininet_WebSocketSession408	WebSocket	N
409	Wininet_WebSocketSession409	WebSocket	N
410	Wininet_WebSocketSession410	WebSocket	N
411	Wininet_WebSocketSession411	WebSocket	N
412	Wininet_WebSocketSession412	WebSocket	N
413	Wininet_WebSocketSession413	WebSocket	N
414	Wininet_WebSocketSession414	WebSocket	N
415	Wininet_WebSocketSession415	WebSocket	N
416	Wininet_WebSocketSession416	WebSocket	N
417	Wininet_WebSocketSession417	WebSocket	N
501	Received response including a cookie header: URL=URL.	Analytic	N
502	Client has stored a cookie in the cookie jar: Domain=Domain, Path=Path, …	Analytic	N
503	Client has deleted a cookie in the cookie jar: Domain=Domain, Path=Path, …	Analytic	N
504	Client has rejected a cookie sent by the server: Domain=Domain, Path=Path, …	Analytic	N
505	Server cookie was rejected by the client's P3P policy: Domain=Domain, Path=Path, …	Analytic	N
506	A cookie header was created for the request: URL=URL.	Analytic	N
507	Cookie added to the request header: Domain=Domain, Path=Path, Name=Name, …	Analytic	N
601	Auth response received: RequestHandle=RequestHandle, Scheme=Scheme, …	Analytic	N
602	Client sets username: RequestHandle=RequestHandle, IsProxy=IsProxy.	Analytic	N
603	Client sets password: RequestHandle=RequestHandle, IsProxy=IsProxy.	Analytic	N
604	Using cached credentials: RequestHandle=RequestHandle, IsProxy=IsProxy.	Analytic	N
605	Using default credentials: RequestHandle=RequestHandle, IsProxy=IsProxy.	Analytic	N
606	Client adds authorization headers to an HTTP request: …	Analytic	N
701	Client begins SSL negotiation: RequestHandle=RequestHandle.	Analytic	N
702	SSL negotiation between client and server has completed successfully: …	Analytic	N
703	SSL negotiation failed: RequestHandle=RequestHandle, Error=Error.	Analytic	N
704	Error validating server certificate (SCHANNEL error): …	Analytic	N
705	Server certificate validated: RequestHandle=RequestHandle, CertHash=CertHash, …	Analytic	N
706	Server requires a client certificate for client authorization: …	Analytic	N
707	There is no client certificate available: RequestHandle=RequestHandle.	Analytic	N
708	The selected client certificate will be used for the SSL transaction: …	Analytic	N
711	Client begins SSL renegotiation: RequestHandle=RequestHandle.	Analytic	N
712	SSL renegotiation between client and server has completed successfully: …	Analytic	N
713	SSL renegotiation failed: RequestHandle=RequestHandle, Error=Error.	Analytic	N
801	Client begins attempts to locate the WPAD configuration file: …	Analytic	N
802	Begin search for configuration file using DHCP: Interface=Interface.	Analytic	N
803	WPAD configuration file found using DHCP: Interface=Interface, …	Analytic	N
804	Search for WPAD configuration file using DHCP failed: Interface=Interface, …	Analytic	N
805	Begin search for configuration file using DNS: DetectFlags=DetectFlags.	Analytic	N
806	WPAD configuration file found using DNS: ConfigurationURL=ConfigurationURL, …	Analytic	N
807	Search for WPAD configuration file using DNS failed: DetectFlags=DetectFlags, …	Analytic	N
808	Search for WPAD configruation file failed: Error=Error.	Analytic	N
809	Begin downloading the configuration file from the configuration URL: …	Analytic	N
810	Client successfully downloaded the configuration file from the configuration …	Analytic	N
811	Downloading the configuration file from the configuration URL failed: …	Analytic	N
812	The downloaded configuration file could not be used: …	Analytic	N
813	Searching for Proxy Information for the URL: URL=URL.	Analytic	N
814	Client has successfully retrieved proxy data for accessing a specified resource: …	Analytic	N
815	Error locating proxy information for the URL: URL=URL, Error=Error.	Analytic	N
816	Blocking autoproxy determination started	Analytic	N
817	Blocking autoproxy determination stopped	Analytic	N
818	WinInet Activity Transfer Event	Analytic	N
819	AutoProxy SWPAD Decision (WPADNetworkDecision) NumConnections (NetworkCount).	Analytic	N
820	Autoproxy host IP lookup started	Analytic	N
821	Autoproxy host IP lookup stopped	Analytic	N
822	Autoproxy SWPAD lookup started	Analytic	N
823	Autoproxy SWPAD lookup stopped	Analytic	N
824	Autoproxy Detection with SWPAD ON started	Analytic	N
825	Autoproxy Detection with SWPAD ON stopped	Analytic	N
826	Autoproxy Detection with SWPAD UNKNOWN started	Analytic	N
827	Autoproxy Detection with SWPAD UNKNOWN stopped	Analytic	N
828	Autoproxy Script Download Started	Analytic	N
829	Autoproxy Script Download Stopped	Analytic	N
834	Autoproxy full scenario started	Analytic	N
835	Autoproxy full scenario stopped	Analytic	N
901	Application offline check started	Analytic	N
902	Application offline check complete	Analytic	N
1000	WININET_TEST_EVENT	Analytic	N
1007	Wininet_SendRequestStart	Analytic	N
1008	Wininet_SendRequestStop	Analytic	N
1009	Wininet_OfflineCacheLookup	Analytic	N
1011	Wininet_OfflineCacheHit	Analytic	N
1013	Wininet_OfflineCacheMiss	Analytic	N
1015	Wininet_PreNet_CacheLookup	Analytic	N
1017	Wininet_PreNet_CacheHit	Analytic	N
1019	Wininet_PreNet_CacheMiss	Analytic	N
1021	Wininet_PostNet_CacheLookup	Analytic	N
1023	Wininet_PostNet_CacheHit	Analytic	N
1025	Wininet_PostNet_CacheMiss	Analytic	N
1027	Wininet_AutodialIfNotLocalHostStart	Analytic	N
1028	Wininet_AutodialIfNotLocalHostStop	Analytic	N
1029	Wininet_ResolveHostStart	Analytic	N
1030	Wininet_ResolveHostStop	Analytic	N
1031	Wininet_SendRequest_Main	Analytic	N
1033	Wininet_SendRequest_Extra	Analytic	N
1035	Wininet_SendRequest_CRLF	Analytic	N
1037	Wininet_ReadData	Analytic	N
1039	Wininet_ReadDataPostReceiveBuf	Analytic	N
1041	Wininet_SendRequest_PostReceiveBuf	Analytic	N
1043	Wininet_DrainResponsePostReceiveBuf	Analytic	N
1045	Wininet_ConnectStart	Analytic	N
1046	Wininet_ConnectStop_V1	Analytic	N
1047	Wininet_LookupConnectionStart	Analytic	N
1048	Wininet_LookupConnectionStop	Analytic	N
1049	Wininet_Redirect	Analytic	N
1051	Wininet_GetaddrinfoStart	Analytic	N
1052	Wininet_GetaddrinfoStop	Analytic	N
1053	Wininet_DHCP_I252WPADStart	Analytic	N
1054	Wininet_DHCP_I252WPADStop	Analytic	N
1055	Wininet_SelectStart	Analytic	N
1056	Wininet_SelectStop	Analytic	N
1057	Requested URL=URL Verb=Verb RequestHeaders=RequestHeaders …	UsageLog	N
1058	Scavenged URL=URL.	UsageLog	N
1059	Wininet_SocketConnectStart	Analytic	N
1060	Wininet_SocketConnectStop	Analytic	N
1061	Wininet_AppCacheLookupStart	Analytic	N
1062	Wininet_AppCacheLookupStop	Analytic	N
1063	Wininet_RequestPrioritySet	Analytic	N
1064	WININET_STREAM_DATA_INDICATED	Analytic	N
1065	Wininet_SecurityContextStart	Analytic	N
1066	Wininet_SecurityContextStop	Analytic	N
1067	Wininet_SocketReceiveDelayStart	Analytic	N
1068	Wininet_SocketReceiveDelayStop	Analytic	N
1069	Wininet_FileIOStart	Analytic	N
1070	Wininet_FileIOStop	Analytic	N
1071	Wininet_FileIOStart1071	Analytic	N
1072	Wininet_FileIOStop1072	Analytic	N
1073	Wininet_AppCacheHandleStart	Analytic	N
1074	Wininet_AppCacheHandleStop	Analytic	N
1075	Wininet_AppCacheHandleStart1075	Analytic	N
1076	Wininet_AppCacheHandleStop1076	Analytic	N
1077	Wininet_AppCacheHandleStart1077	Analytic	N
1078	Wininet_AppCacheHandleStop1078	Analytic	N
1079	Wininet_AppCacheHandleStart1079	Analytic	N
1080	Wininet_AppCacheHandleStop1080	Analytic	N
1081	Wininet_AppCacheHandleStart1081	Analytic	N
1082	Wininet_AppCacheHandleStop1082	Analytic	N
1083	Wininet_AppCacheHandleStart1083	Analytic	N
1084	Wininet_AppCacheHandleStop1084	Analytic	N
1085	Wininet_AppCacheHandleStart1085	Analytic	N
1086	Wininet_AppCacheHandleStop1086	Analytic	N
1087	Wininet_AppCacheHandleStart1087	Analytic	N
1088	Wininet_AppCacheHandleStop1088	Analytic	N
1089	Wininet_AppCacheServerContainerStart	Analytic	N
1090	Wininet_AppCacheServerContainerStop	Analytic	N
1091	Wininet_AppCacheServerContainerStart1091	Analytic	N
1092	Wininet_AppCacheServerContainerStop1092	Analytic	N
1093	Wininet_AppCacheServerContainerStart1093	Analytic	N
1094	Wininet_AppCacheServerContainerStop1094	Analytic	N
1095	Wininet_AppCacheServerContainerStart1095	Analytic	N
1096	Wininet_AppCacheServerContainerStop1096	Analytic	N
1097	Wininet_AppCacheServerContainerStart1097	Analytic	N
1098	Wininet_AppCacheServerContainerStop1098	Analytic	N
1099	Wininet_AppCacheServerContainerStart1099	Analytic	N
1100	Wininet_AppCacheServerContainerStop1100	Analytic	N
1101	Wininet_AppCacheServerContainerStart1101	Analytic	N
1102	Wininet_AppCacheServerContainerStop1102	Analytic	N
1103	Wininet_AppCacheServerContainerStart1103	Analytic	N
1104	Wininet_AppCacheServerContainerStop1104	Analytic	N
1105	Wininet_AppCacheServerContainerStart1105	Analytic	N
1106	Wininet_AppCacheServerContainerStop1106	Analytic	N
1107	Wininet_AppCacheServerContainerStart1107	Analytic	N
1108	Wininet_AppCacheServerContainerStop1108	Analytic	N
1109	Wininet_AppCacheServerContainerStart1109	Analytic	N
1110	Wininet_AppCacheServerContainerStop1110	Analytic	N
1111	Wininet_BlobServerContainerStart	Analytic	N
1112	Wininet_BlobServerContainerStop	Analytic	N
1113	Wininet_BlobServerContainerStart1113	Analytic	N
1114	Wininet_BlobServerContainerStop1114	Analytic	N
1115	Wininet_BlobServerContainerStart1115	Analytic	N
1116	Wininet_BlobServerContainerStop1116	Analytic	N
1117	Wininet_BlobServerContainerStart1117	Analytic	N
1118	Wininet_BlobServerContainerStop1118	Analytic	N
1119	Wininet_BlobServerContainerStart1119	Analytic	N
1120	Wininet_BlobServerContainerStop1120	Analytic	N
1121	Wininet_BlobServerContainerStart1121	Analytic	N
1122	Wininet_BlobServerContainerStop1122	Analytic	N
1123	Wininet_BlobServerContainerStart1123	Analytic	N
1124	Wininet_BlobServerContainerStop1124	Analytic	N
1125	Wininet_CacheClientBloomFilterStart	Analytic	N
1126	Wininet_CacheClientBloomFilterStop	Analytic	N
1127	Wininet_CacheClientBloomFilterStart1127	Analytic	N
1128	Wininet_CacheClientBloomFilterStop1128	Analytic	N
1129	Wininet_CookieServerContainerStart	Analytic	N
1130	Wininet_CookieServerContainerStop	Analytic	N
1131	Wininet_CookieServerContainerStart1131	Analytic	N
1132	Wininet_CookieServerContainerStop1132	Analytic	N
1133	Wininet_CookieServerContainerStart1133	Analytic	N
1134	Wininet_CookieServerContainerStop1134	Analytic	N
1135	Wininet_CookieServerContainerStart1135	Analytic	N
1136	Wininet_CookieServerContainerStop1136	Analytic	N
1137	Wininet_CookieServerContainerStart1137	Analytic	N
1138	Wininet_CookieServerContainerStop1138	Analytic	N
1139	Wininet_CookieServerContainerStart1139	Analytic	N
1140	Wininet_CookieServerContainerStop1140	Analytic	N
1141	Wininet_CacheClientCountersStart	Analytic	N
1142	Wininet_CacheClientCountersStop	Analytic	N
1143	Wininet_DependencyServerContainerStart	Analytic	N
1144	Wininet_DependencyServerContainerStop	Analytic	N
1145	Wininet_DependencyServerContainerStart1145	Analytic	N
1146	Wininet_DependencyServerContainerStop1146	Analytic	N
1147	Wininet_DependencyServerContainerStart1147	Analytic	N
1148	Wininet_DependencyServerContainerStop1148	Analytic	N
1149	Wininet_DependencyServerContainerStart1149	Analytic	N
1150	Wininet_DependencyServerContainerStop1150	Analytic	N
1151	Wininet_DependencyServerContainerStart1151	Analytic	N
1152	Wininet_DependencyServerContainerStop1152	Analytic	N
1153	Wininet_HstsServerContainerStart	Analytic	N
1154	Wininet_HstsServerContainerStop	Analytic	N
1155	Wininet_HstsServerContainerStart1155	Analytic	N
1156	Wininet_HstsServerContainerStop1156	Analytic	N
1157	Wininet_HstsServerContainerStart1157	Analytic	N
1158	Wininet_HstsServerContainerStop1158	Analytic	N
1159	Wininet_HstsServerContainerStart1159	Analytic	N
1160	Wininet_HstsServerContainerStop1160	Analytic	N
1161	Wininet_HstsServerContainerStart1161	Analytic	N
1162	Wininet_HstsServerContainerStop1162	Analytic	N
1163	Wininet_CacheServerConnectionStart	Analytic	N
1164	Wininet_CacheServerConnectionStop	Analytic	N
1165	Wininet_CacheServerConnectionStart1165	Analytic	N
1166	Wininet_CacheServerConnectionStop1166	Analytic	N
1167	Wininet_CacheServerEntryEnumStart	Analytic	N
1168	Wininet_CacheServerEntryEnumStop	Analytic	N
1169	Wininet_CacheServerEntryEnumStart1169	Analytic	N
1170	Wininet_CacheServerEntryEnumStop1170	Analytic	N
1171	Wininet_CacheServerEntryEnumStart1171	Analytic	N
1172	Wininet_CacheServerEntryEnumStop1172	Analytic	N
1173	Wininet_CacheServerContainerStart	Analytic	N
1174	Wininet_CacheServerContainerStop	Analytic	N
1175	Wininet_CacheServerContainerStart1175	Analytic	N
1176	Wininet_CacheServerContainerStop1176	Analytic	N
1177	Wininet_CacheServerContainerStart1177	Analytic	N
1178	Wininet_CacheServerContainerStop1178	Analytic	N
1179	Wininet_CacheServerContainerStart1179	Analytic	N
1180	Wininet_CacheServerContainerStop1180	Analytic	N
1181	Wininet_CacheServerContainerStart1181	Analytic	N
1182	Wininet_CacheServerContainerStop1182	Analytic	N
1183	Wininet_CacheServerContainerStart1183	Analytic	N
1184	Wininet_CacheServerContainerStop1184	Analytic	N
1185	Wininet_CacheServerContainerStart1185	Analytic	N
1186	Wininet_CacheServerContainerStop1186	Analytic	N
1187	Wininet_CacheServerContainerStart1187	Analytic	N
1188	Wininet_CacheServerContainerStop1188	Analytic	N
1189	Wininet_CacheServerContainerStart1189	Analytic	N
1190	Wininet_CacheServerContainerStop1190	Analytic	N
1191	Wininet_CacheServerContainerStart1191	Analytic	N
1192	Wininet_CacheServerContainerStop1192	Analytic	N
1193	Wininet_CacheServerContainerStart1193	Analytic	N
1194	Wininet_CacheServerContainerStop1194	Analytic	N
1195	Wininet_CacheServerContainerStart1195	Analytic	N
1196	Wininet_CacheServerContainerStop1196	Analytic	N
1197	Wininet_CacheServerContainerStart1197	Analytic	N
1198	Wininet_CacheServerContainerStop1198	Analytic	N
1199	Wininet_CacheServerContainerStart1199	Analytic	N
1200	Wininet_CacheServerContainerStop1200	Analytic	N
1201	Wininet_CacheServerContainerStart1201	Analytic	N
1202	Wininet_CacheServerContainerStop1202	Analytic	N
1203	Wininet_CacheServerContainerStart1203	Analytic	N
1204	Wininet_CacheServerContainerStop1204	Analytic	N
1205	Wininet_CacheServerContainerStart1205	Analytic	N
1206	Wininet_CacheServerContainerStop1206	Analytic	N
1207	Wininet_CacheServerContainerStart1207	Analytic	N
1208	Wininet_CacheServerContainerStop1208	Analytic	N
1209	Wininet_CacheServerContainerStart1209	Analytic	N
1210	Wininet_CacheServerContainerStop1210	Analytic	N
1211	Wininet_CacheServerContainerStart1211	Analytic	N
1212	Wininet_CacheServerContainerStop1212	Analytic	N
1213	Wininet_CacheServerContainerStart1213	Analytic	N
1214	Wininet_CacheServerContainerStop1214	Analytic	N
1215	Wininet_CacheServerContainerStart1215	Analytic	N
1216	Wininet_CacheServerContainerStop1216	Analytic	N
1217	Wininet_CacheServerContainerStart1217	Analytic	N
1218	Wininet_CacheServerContainerStop1218	Analytic	N
1219	Wininet_CacheServerContainerStart1219	Analytic	N
1220	Wininet_CacheServerContainerStop1220	Analytic	N
1221	Wininet_UrlCacheContainerStart	Analytic	N
1222	Wininet_UrlCacheContainerStop	Analytic	N
1223	Wininet_UrlCacheContainerStart1223	Analytic	N
1224	Wininet_UrlCacheContainerStop1224	Analytic	N
1225	Wininet_UrlCacheContainerStart1225	Analytic	N
1226	Wininet_UrlCacheContainerStop1226	Analytic	N
1227	Wininet_UrlCacheContainerStart1227	Analytic	N
1228	Wininet_UrlCacheContainerStop1228	Analytic	N
1229	Wininet_UrlCacheContainerStart1229	Analytic	N
1230	Wininet_UrlCacheContainerStop1230	Analytic	N
1231	Wininet_UrlCacheContainerStart1231	Analytic	N
1232	Wininet_UrlCacheContainerStop1232	Analytic	N
1233	Wininet_UrlCacheContainerStart1233	Analytic	N
1234	Wininet_UrlCacheContainerStop1234	Analytic	N
1235	Wininet_UrlCacheContainerStart1235	Analytic	N
1236	Wininet_UrlCacheContainerStop1236	Analytic	N
1237	Wininet_UrlCacheContainerStart1237	Analytic	N
1238	Wininet_UrlCacheContainerStop1238	Analytic	N
1239	Wininet_SyncInternetOpen	Analytic	N
1240	Wininet_SyncSendRequestStart	Analytic	N
1241	Wininet_SyncSendRequestStop	Analytic	N
1242	Wininet_SyncQueryDataAvailableStart	Analytic	N
1243	Wininet_SyncQueryDataAvailableStop	Analytic	N
1244	Wininet_SyncReadFileStart	Analytic	N
1245	Wininet_SyncReadFileStop	Analytic	N
1246	Wininet_SyncWriteFileStart	Analytic	N
1247	Wininet_SyncWriteFileStop	Analytic	N

Event ID 101: Session handle HINTERNET created: UserAgent=UserAgent, AccessType=AccessType, ProxyList=ProxyList, ProxyBypassList=ProxyBypassList, Flags=Flags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_ROOT_HANDLE_CREATED

Description

Session handle HINTERNET created: UserAgent=UserAgent, AccessType=AccessType, ProxyList=ProxyList, ProxyBypassList=ProxyBypassList, Flags=Flags.

Message #

Session handle %1 created: UserAgent=%3, AccessType=%5, ProxyList=%7, ProxyBypassList=%9, Flags=%10

Fields #

Name	Description
`HINTERNET` Pointer
`_UserAgentLength` UInt16
`UserAgent` AnsiString
`_AccessTypeLength` UInt16
`AccessType` AnsiString
`_ProxyListLength` UInt16
`ProxyList` AnsiString
`_ProxyBypassListLength` UInt16
`ProxyBypassList` AnsiString
`Flags` UInt32

Event ID 102: Handle ConnectionHandle created by InternetOpenURL: SessionHandle=ParentHandle,URL=URL, Headers=Headers, Flags=Flags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_OPEN_URL_HANDLE_CREATED

Description

Handle ConnectionHandle created by InternetOpenURL: SessionHandle=ParentHandle,URL=URL, Headers=Headers, Flags=Flags.

Message #

Handle %1 created by InternetOpenURL: SessionHandle=%2,URL=%4, Headers=%6, Flags=%7

Fields #

Name	Description
`ConnectionHandle` Pointer
`ParentHandle` Pointer
`_URLLength` UInt16
`URL` AnsiString
`_HeadersLength` UInt16
`Headers` AnsiString
`Flags` UInt32

Event ID 103: Handle ConnectionHandle created by InternetConnect: SessionHandle=ParentHandle, Server=ServerName:ServerPort, Service, Flags=Flags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_CONNECT_HANDLE_CREATED

Description

Handle ConnectionHandle created by InternetConnect: SessionHandle=ParentHandle, Server=ServerName:ServerPort, Service, Flags=Flags.

Message #

Handle %1 created by InternetConnect: SessionHandle=%2, Server=%4:%5, %7, Flags=%8

Fields #

Name	Description
`ConnectionHandle` Pointer
`ParentHandle` Pointer
`_ServerNameLength` UInt16
`ServerName` AnsiString
`ServerPort` UInt32
`_ServiceLength` UInt16
`Service` AnsiString
`Flags` UInt32

Event ID 104: Request handle ConnectionHandle created by HttpOpenRequest: ConnectionHandle=ParentHandle, Verb, Target=ObjectName, Ver=Version, Referrer=Referrer, Media types=AcceptTypes, Flags=Flags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_REQUEST_HANDLE_CREATED

Description

Request handle ConnectionHandle created by HttpOpenRequest: ConnectionHandle=ParentHandle, Verb, Target=ObjectName, Ver=Version, Referrer=Referrer, Media types=AcceptTypes, Flags=Flags.

Message #

Request handle %1 created by HttpOpenRequest: ConnectionHandle=%2, %4, Target=%6, Ver=%8, Referrer=%10, Media types=%12, Flags=%13

Fields #

Name	Description
`ConnectionHandle` Pointer
`ParentHandle` Pointer
`_VerbLength` UInt16
`Verb` AnsiString
`_ObjectNameLength` UInt16
`ObjectName` AnsiString
`_VersionLength` UInt16
`Version` AnsiString
`_ReferrerLength` UInt32
`Referrer` AnsiString
`_AcceptTypesLength` UInt16
`AcceptTypes` AnsiString
`Flags` UInt32

Event ID 105: Handle HINTERNET closed successfully.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HANDLE_CLOSED

Description

Handle HINTERNET closed successfully.

Message #

Handle %1 closed successfully

Fields #

Name	Description
`HINTERNET` Pointer

Event ID 106: Failed to create handle: ParentHandle=HINTERNET, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HANDLE_CREATE_FAILED

Description

Failed to create handle: ParentHandle=HINTERNET, Error=Error.

Message #

Failed to create handle: ParentHandle=%1, Error=%2

Fields #

Name	Description
`HINTERNET` Pointer
`Error` UInt32

Event ID 107: Handle HINTERNET failed to close: Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HANDLE_CLOSE_FAILED

Description

Handle HINTERNET failed to close: Error=Error.

Message #

Handle %1 failed to close: Error=%2

Fields #

Name	Description
`HINTERNET` Pointer
`Error` UInt32

Event ID 108: Request handle ConnectionHandle Server Details: Server=ServerName Port=ServerPort Service=Service.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_REQUEST_HANDLE_CREATED

Description

Request handle ConnectionHandle Server Details: Server=ServerName Port=ServerPort Service=Service.

Message #

Request handle %1 Server Details: Server=%3 Port=%4 Service=%6

Fields #

Name	Description
`ConnectionHandle` Pointer
`_ServerNameLength` UInt16
`ServerName` AnsiString
`ServerPort` UInt32
`_ServiceLength` UInt16
`Service` AnsiString

Event ID 200: HTTP request was received from API: RequestHandle=HINTERNET.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_REQUEST
Opcode: Start

Description

HTTP request was received from API: RequestHandle=HINTERNET.

Message #

HTTP request was received from API: RequestHandle=%1

Fields #

Name	Description
`HINTERNET` Pointer
`Context` Pointer

Event ID 201: HTTP request was sent successfully: RequestHandle=RequestHandle, SocketHandle=SocketHandle, Verb, CookieSent= Cookie.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_REQUEST
Opcode: Stop

Description

HTTP request was sent successfully: RequestHandle=RequestHandle, SocketHandle=SocketHandle, Verb, CookieSent= Cookie.

Message #

HTTP request was sent successfully: RequestHandle=%1, SocketHandle=%2, %4, CookieSent= %5

Fields #

Name	Description
`RequestHandle` Pointer
`SocketHandle` Pointer
`_VerbLength` UInt16
`Verb` AnsiString
`Cookie` Boolean

Event ID 202: HTTP request send failed: Handle=Handle, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_REQUEST
Opcode: Fail

Description

HTTP request send failed: Handle=Handle, Error=Error.

Message #

HTTP request send failed: Handle=%1, Error=%2

Fields #

Name	Description
`Handle` Pointer
`Error` UInt32

Event ID 203: HTTP response (ResponseCode) received: RequestHandle=RequestHandle, SocketHandle=SocketHandle, Verb, ContentLength=ContentLength.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_RESPONSE
Opcode: Stop

Description

HTTP response (ResponseCode) received: RequestHandle=RequestHandle, SocketHandle=SocketHandle, Verb, ContentLength=ContentLength.

Message #

HTTP response (%1) received: RequestHandle=%2, SocketHandle=%3, %5, ContentLength=%7

Fields #

Name	Description
`ResponseCode` Int32
`RequestHandle` Pointer
`SocketHandle` Pointer
`_VerbLength` UInt16
`Verb` AnsiString
`_ContentLengthStrLength` UInt16
`ContentLength` AnsiString

Event ID 204: HTTP response failed: Handle=Handle, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_RESPONSE
Opcode: Fail

Description

HTTP response failed: Handle=Handle, Error=Error.

Message #

HTTP response failed: Handle=%1, Error=%2

Fields #

Name	Description
`Handle` Pointer
`Error` UInt32

Event ID 205: HTTP connection (Handle=ConnectionHandle, SocketHandle=SocketHandle) closed due to the following reason: Reason.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_CONNECTION_CLOSED

Description

HTTP connection (Handle=ConnectionHandle, SocketHandle=SocketHandle) closed due to the following reason: Reason.

Message #

HTTP connection (Handle=%1, SocketHandle=%2) closed due to the following reason: %4

Fields #

Name	Description
`ConnectionHandle` Pointer
`SocketHandle` Pointer
`_ReasonLength` UInt16
`Reason` AnsiString

Event ID 206: Keep-alive connection is re-used: ConnectionHandle=ConnectionHandle, SocketHandle=SocketHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_KEEP_ALIVE_CONNECTION_REUSED

Description

Keep-alive connection is re-used: ConnectionHandle=ConnectionHandle, SocketHandle=SocketHandle.

Message #

Keep-alive connection is re-used: ConnectionHandle=%1, SocketHandle=%2

Fields #

Name	Description
`ConnectionHandle` Pointer
`SocketHandle` Pointer

Event ID 207: Connection is returned to keep-alive pool: RequestHandle=ConnectionHandle, SocketHandle=SocketHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_KEEP_ALIVE_CONNECTION_POOLED

Description

Connection is returned to keep-alive pool: RequestHandle=ConnectionHandle, SocketHandle=SocketHandle.

Message #

Connection is returned to keep-alive pool: RequestHandle=%1, SocketHandle=%2

Fields #

Name	Description
`ConnectionHandle` Pointer
`SocketHandle` Pointer

Event ID 208: Keep-alive connection is closed: ConnectionHandle=ConnectionHandle, SocketHandle=SocketHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_KEEP_ALIVE_CONNECTION_CLOSED

Description

Keep-alive connection is closed: ConnectionHandle=ConnectionHandle, SocketHandle=SocketHandle.

Message #

Keep-alive connection is closed: ConnectionHandle=%1, SocketHandle=%2

Fields #

Name	Description
`ConnectionHandle` Pointer
`SocketHandle` Pointer

Event ID 209: HTTP response entity body received: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_RESPONSE_BODY_RECEIVED

Description

HTTP response entity body received: RequestHandle=RequestHandle.

Message #

HTTP response entity body received: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer

Event ID 210: HTTP Request Headers RequestHandle=RequestHandle Headers.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_REQUEST_HEADER

Description

HTTP Request Headers RequestHandle=RequestHandle Headers.

Message #

HTTP Request Headers RequestHandle=%1 %3

Fields #

Name	Description
`RequestHandle` Pointer
`Length` UInt16
`Headers` AnsiString

Event ID 211: HTTP Response Headers RequestHandle=RequestHandle Headers.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_RESPONSE_HEADER

Description

HTTP Response Headers RequestHandle=RequestHandle Headers.

Message #

HTTP Response Headers RequestHandle=%1 %3

Fields #

Name	Description
`RequestHandle` Pointer
`Length` UInt16
`Headers` AnsiString

Event ID 212: HTTP Request Headers OptionalData RequestHandle=RequestHandle Headers.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_REQUEST_HEADER_OPTIONAL

Description

HTTP Request Headers OptionalData RequestHandle=RequestHandle Headers.

Message #

HTTP Request Headers OptionalData RequestHandle=%1 %3

Fields #

Name	Description
`RequestHandle` Pointer
`Length` UInt16
`Headers` AnsiString

Event ID 213: WinInet::Http response entity body receive failed: Request Handle=RequestHandle, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_RESPONSE_BODY_READ_ERROR

Description

WinInet::Http response entity body receive failed: Request Handle=RequestHandle, Error=Error.

Message #

WinInet::Http response entity body receive failed: Request Handle=%1, Error=%2

Fields #

Name	Description
`RequestHandle` Pointer
`Error` UInt32

Event ID 301: TCP connection to server ServerName established: ConnectionHandle=ConnectionHandle, SocketHandle=SocketHandle, LocalPort=LocalPort.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_TCP_CONNECTION
Opcode: Start

Description

TCP connection to server ServerName established: ConnectionHandle=ConnectionHandle, SocketHandle=SocketHandle, LocalPort=LocalPort.

Message #

TCP connection to server %2 established: ConnectionHandle=%3, SocketHandle=%4, LocalPort=%5

Fields #

Name	Description
`_ServerNameLength` UInt16
`ServerName` AnsiString
`ConnectionHandle` Pointer
`SocketHandle` Pointer
`LocalPort` UInt32

Event ID 302: TCP connection to ServerName for connection handle ConnectionHandle failed: Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_TCP_CONNECTION
Opcode: Fail

Description

TCP connection to ServerName for connection handle ConnectionHandle failed: Error=Error.

Message #

TCP connection to %2 for connection handle %3 failed: Error=%4

Fields #

Name	Description
`_ServerNameLength` UInt16
`ServerName` AnsiString
`ConnectionHandle` Pointer
`Error` UInt32

Event ID 303: TCP connection closed successfully: SocketHandle=SocketHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_TCP_CONNECTION
Opcode: Stop

Description

TCP connection closed successfully: SocketHandle=SocketHandle.

Message #

TCP connection closed successfully: SocketHandle=%1

Fields #

Name	Description
`SocketHandle` Pointer

Event ID 304: DNS query for HostName hostname is sent: Handle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_DNS_QUERY
Opcode: Start

Description

DNS query for HostName hostname is sent: Handle=RequestHandle.

Message #

DNS query for %2 hostname is sent: Handle=%3

Fields #

Name	Description
`_HostNameLength` UInt16
`HostName` AnsiString
`RequestHandle` Pointer

Event ID 305: DNS query for HostName hostname is complete: Handle=RequestHandle, Addresses=AddressList.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_DNS_QUERY
Opcode: Stop

Description

DNS query for HostName hostname is complete: Handle=RequestHandle, Addresses=AddressList.

Message #

DNS query for %2 hostname is complete: Handle=%3, Addresses=%5

Fields #

Name	Description
`_HostNameLength` UInt16
`HostName` AnsiString
`RequestHandle` Pointer
`_AddressListLength` UInt16
`AddressList` AnsiString

Event ID 306: DNS query for HostName hostname failed: Handle=RequestHandle Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_DNS_QUERY
Opcode: Fail

Description

DNS query for HostName hostname failed: Handle=RequestHandle Error=Error.

Message #

DNS query for %2 hostname failed: Handle=%3 Error=%4

Fields #

Name	Description
`_HostNameLength` UInt16
`HostName` AnsiString
`RequestHandle` Pointer
`Error` UInt32

Event ID 307: Re-used DNS cache, query for HostName hostname is complete: Handle=RequestHandle, Addresses=AddressList.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_DNS_QUERY
Opcode: Stop

Description

Re-used DNS cache, query for HostName hostname is complete: Handle=RequestHandle, Addresses=AddressList.

Message #

Re-used DNS cache, query for %2 hostname is complete: Handle=%3, Addresses=%5

Fields #

Name	Description
`_HostNameLength` UInt16
`HostName` AnsiString
`RequestHandle` Pointer
`_AddressListLength` UInt16
`AddressList` AnsiString

Event ID 308: A network change was detected: Handle=Handle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_NETWORK_CHANGE_DETECTED

Description

A network change was detected: Handle=Handle.

Message #

A network change was detected: Handle=%1

Fields #

Name	Description
`Handle` Pointer

Event ID 400: Wininet_WebSocketUpgrade

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketUpgrade

Fields #

Name	Description
`CorrelationID` GUID
`InternetFlags` UInt32
`Length` UInt16
`Headers` AnsiString

Event ID 401: Wininet_WebSocketUpgrade401

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketUpgrade

Fields #

Name	Description
`CorrelationID` GUID
`ResponseCode` Int32
`Length` UInt16
`Headers` AnsiString

Event ID 402: Wininet_WebSocketSessionStart

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession
Opcode: Start

Fields #

Name	Description
`CorrelationID` GUID

Event ID 403: Wininet_WebSocketSessionStop

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession
Opcode: Stop

Fields #

Name	Description
`CorrelationID` GUID
`Status` UInt16	NTSTATUS reference

Event ID 404: Wininet_WebSocketSession

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID
`Length` Int64
`TruncatedLength` UInt16
`TruncatedData` UnicodeString

Event ID 405: Wininet_WebSocketSession405

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID
`Length` Int64
`TruncatedLength` UInt16
`TruncatedData` UnicodeString

Event ID 406: Wininet_WebSocketSession406

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID
`Length` Int64

Event ID 407: Wininet_WebSocketSession407

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID
`Status` UInt16	NTSTATUS reference
`Length` UInt32
`Reason` AnsiString

Event ID 408: Wininet_WebSocketSession408

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID
`Length` Int64

Event ID 409: Wininet_WebSocketSession409

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID
`Status` UInt16	NTSTATUS reference
`Length` UInt32
`Reason` AnsiString

Event ID 410: Wininet_WebSocketSession410

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID
`Length` Int64

Event ID 411: Wininet_WebSocketSession411

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID
`Length` Int64

Event ID 412: Wininet_WebSocketSession412

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID

Event ID 413: Wininet_WebSocketSession413

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID

Event ID 414: Wininet_WebSocketSession414

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID
`SequenceNumber` UInt32
`PayloadByteLength` UInt32
`Payload` Binary

Event ID 415: Wininet_WebSocketSession415

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID
`SequenceNumber` UInt32
`PayloadByteLength` UInt32
`Payload` Binary

Event ID 416: Wininet_WebSocketSession416

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID
`SequenceNumber` UInt32
`PayloadByteLength` UInt32
`Payload` Binary

Event ID 417: Wininet_WebSocketSession417

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID
`SequenceNumber` UInt32
`PayloadByteLength` UInt32
`Payload` Binary

Event ID 501: Received response including a cookie header: URL=URL.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_HEADER_RECEIVED

Description

Received response including a cookie header: URL=URL.

Message #

Received response including a cookie header: URL=%2

Fields #

Name	Description
`URLLength` UInt32
`URL` AnsiString

Event ID 502: Client has stored a cookie in the cookie jar: Domain=Domain, Path=Path, Name=Name, Value=Value.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_STORED

Description

Client has stored a cookie in the cookie jar: Domain=Domain, Path=Path, Name=Name, Value=Value.

Message #

Client has stored a cookie in the cookie jar: Domain=%2, Path=%4, Name=%6, Value=%8

Fields #

Name	Description
`_DomainLength` UInt16
`Domain` AnsiString
`_PathLength` UInt16
`Path` AnsiString
`_NameLength` UInt16
`Name` AnsiString
`_ValueLength` UInt16
`Value` AnsiString

Event ID 503: Client has deleted a cookie in the cookie jar: Domain=Domain, Path=Path, Name=Name, Value=Value.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_DELETED

Description

Client has deleted a cookie in the cookie jar: Domain=Domain, Path=Path, Name=Name, Value=Value.

Message #

Client has deleted a cookie in the cookie jar: Domain=%2, Path=%4, Name=%6, Value=%8

Fields #

Name	Description
`_DomainLength` UInt16
`Domain` AnsiString
`_PathLength` UInt16
`Path` AnsiString
`_NameLength` UInt16
`Name` AnsiString
`_ValueLength` UInt16
`Value` AnsiString

Event ID 504: Client has rejected a cookie sent by the server: Domain=Domain, Path=Path, Name=Name, Value=Value.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_BLOCKED

Description

Client has rejected a cookie sent by the server: Domain=Domain, Path=Path, Name=Name, Value=Value.

Message #

Client has rejected a cookie sent by the server: Domain=%2, Path=%4, Name=%6, Value=%8

Fields #

Name	Description
`_DomainLength` UInt16
`Domain` AnsiString
`_PathLength` UInt16
`Path` AnsiString
`_NameLength` UInt16
`Name` AnsiString
`_ValueLength` UInt16
`Value` AnsiString

Event ID 505: Server cookie was rejected by the client's P3P policy: Domain=Domain, Path=Path, Name=Name, Value=Value.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_P3P_REJECTED

Description

Server cookie was rejected by the client's P3P policy: Domain=Domain, Path=Path, Name=Name, Value=Value.

Message #

Server cookie was rejected by the client's P3P policy: Domain=%2, Path=%4, Name=%6, Value=%8

Fields #

Name	Description
`_DomainLength` UInt16
`Domain` AnsiString
`_PathLength` UInt16
`Path` AnsiString
`_NameLength` UInt16
`Name` AnsiString
`_ValueLength` UInt16
`Value` AnsiString

Event ID 506: A cookie header was created for the request: URL=URL.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_REQUEST_HEADER_CREATED

Description

A cookie header was created for the request: URL=URL.

Message #

A cookie header was created for the request: URL=%2

Fields #

Name	Description
`URLLength` UInt32
`URL` AnsiString

Event ID 507: Cookie added to the request header: Domain=Domain, Path=Path, Name=Name, Value=Value.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_ADDED_TO_HEADER

Description

Cookie added to the request header: Domain=Domain, Path=Path, Name=Name, Value=Value.

Message #

Cookie added to the request header: Domain=%2, Path=%4, Name=%6, Value=%8

Fields #

Name	Description
`_DomainLength` UInt16
`Domain` AnsiString
`_PathLength` UInt16
`Path` AnsiString
`_NameLength` UInt16
`Name` AnsiString
`_ValueLength` UInt16
`Value` AnsiString

Event ID 601: Auth response received: RequestHandle=RequestHandle, Scheme=Scheme, IsProxy=IsProxy.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTH_RESPONSE_RECEIVED

Description

Auth response received: RequestHandle=RequestHandle, Scheme=Scheme, IsProxy=IsProxy.

Message #

Auth response received: RequestHandle=%1, Scheme=%3, IsProxy=%4

Fields #

Name	Description
`RequestHandle` Pointer
`_SchemeLength` UInt16
`Scheme` AnsiString
`IsProxy` Boolean

Event ID 602: Client sets username: RequestHandle=RequestHandle, IsProxy=IsProxy.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTH_CLIENT_SETS_USERNAME

Description

Client sets username: RequestHandle=RequestHandle, IsProxy=IsProxy.

Message #

Client sets username: RequestHandle=%1, IsProxy=%2

Fields #

Name	Description
`RequestHandle` Pointer
`IsProxy` Boolean

Event ID 603: Client sets password: RequestHandle=RequestHandle, IsProxy=IsProxy.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTH_CLIENT_SETS_PASSWORD

Description

Client sets password: RequestHandle=RequestHandle, IsProxy=IsProxy.

Message #

Client sets password: RequestHandle=%1, IsProxy=%2

Fields #

Name	Description
`RequestHandle` Pointer
`IsProxy` Boolean

Event ID 604: Using cached credentials: RequestHandle=RequestHandle, IsProxy=IsProxy.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTH_USING_CACHED_CREDS

Description

Using cached credentials: RequestHandle=RequestHandle, IsProxy=IsProxy.

Message #

Using cached credentials: RequestHandle=%1, IsProxy=%2

Fields #

Name	Description
`RequestHandle` Pointer
`IsProxy` Boolean

Event ID 605: Using default credentials: RequestHandle=RequestHandle, IsProxy=IsProxy.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTH_USING_DEFAULT_CREDS

Description

Using default credentials: RequestHandle=RequestHandle, IsProxy=IsProxy.

Message #

Using default credentials: RequestHandle=%1, IsProxy=%2

Fields #

Name	Description
`RequestHandle` Pointer
`IsProxy` Boolean

Event ID 606: Client adds authorization headers to an HTTP request: RequestHandle=RequestHandle, Scheme=Scheme, IsProxy=IsProxy.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTH_CLIENT_ADD_HEADERS

Description

Client adds authorization headers to an HTTP request: RequestHandle=RequestHandle, Scheme=Scheme, IsProxy=IsProxy.

Message #

Client adds authorization headers to an HTTP request: RequestHandle=%1, Scheme=%3, IsProxy=%4

Fields #

Name	Description
`RequestHandle` Pointer
`_SchemeLength` UInt16
`Scheme` AnsiString
`IsProxy` Boolean

Event ID 701: Client begins SSL negotiation: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_NEGOTIATION
Opcode: Start

Description

Client begins SSL negotiation: RequestHandle=RequestHandle.

Message #

Client begins SSL negotiation: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer

Event ID 702: SSL negotiation between client and server has completed successfully: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_NEGOTIATION
Opcode: Stop

Description

SSL negotiation between client and server has completed successfully: RequestHandle=RequestHandle.

Message #

SSL negotiation between client and server has completed successfully: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer

Event ID 703: SSL negotiation failed: RequestHandle=RequestHandle, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_NEGOTIATION
Opcode: Fail

Description

SSL negotiation failed: RequestHandle=RequestHandle, Error=Error.

Message #

SSL negotiation failed: RequestHandle=%1, Error=%2

Fields #

Name	Description
`RequestHandle` Pointer
`Error` UInt32

Event ID 704: Error validating server certificate (SCHANNEL error): RequestHandle=RequestHandle, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_SERVER_CERT_ERROR

Description

Error validating server certificate (SCHANNEL error): RequestHandle=RequestHandle, Error=Error.

Message #

Error validating server certificate (SCHANNEL error): RequestHandle=%1, Error=%2

Fields #

Name	Description
`RequestHandle` Pointer
`Error` UInt32

Event ID 705: Server certificate validated: RequestHandle=RequestHandle, CertHash=CertHash, WarningFlags=WarningFlags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_SERVER_CERT_VALIDATED

Description

Server certificate validated: RequestHandle=RequestHandle, CertHash=CertHash, WarningFlags=WarningFlags.

Message #

Server certificate validated: RequestHandle=%1, CertHash=%3, WarningFlags=%4

Fields #

Name	Description
`RequestHandle` Pointer
`_CertHashLength` UInt16
`CertHash` AnsiString
`WarningFlags` UInt32

Event ID 706: Server requires a client certificate for client authorization: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_CLIENT_CERT_REQUIRED

Description

Server requires a client certificate for client authorization: RequestHandle=RequestHandle.

Message #

Server requires a client certificate for client authorization: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer

Event ID 707: There is no client certificate available: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_CLIENT_CERT_UNAVAILABLE

Description

There is no client certificate available: RequestHandle=RequestHandle.

Message #

There is no client certificate available: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer
`Error` UInt32

Event ID 708: The selected client certificate will be used for the SSL transaction: RequestHandle=RequestHandle, CertHash=CertHash.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_CLIENT_CERT_SELECTED

Description

The selected client certificate will be used for the SSL transaction: RequestHandle=RequestHandle, CertHash=CertHash.

Message #

The selected client certificate will be used for the SSL transaction: RequestHandle=%1, CertHash=%3

Fields #

Name	Description
`RequestHandle` Pointer
`_CertHashLength` UInt16
`CertHash` AnsiString

Event ID 711: Client begins SSL renegotiation: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_RENEGOTIATION
Opcode: Start

Description

Client begins SSL renegotiation: RequestHandle=RequestHandle.

Message #

Client begins SSL renegotiation: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer

Event ID 712: SSL renegotiation between client and server has completed successfully: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_RENEGOTIATION
Opcode: Stop

Description

SSL renegotiation between client and server has completed successfully: RequestHandle=RequestHandle.

Message #

SSL renegotiation between client and server has completed successfully: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer

Event ID 713: SSL renegotiation failed: RequestHandle=RequestHandle, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_RENEGOTIATION
Opcode: Fail

Description

SSL renegotiation failed: RequestHandle=RequestHandle, Error=Error.

Message #

SSL renegotiation failed: RequestHandle=%1, Error=%2

Fields #

Name	Description
`RequestHandle` Pointer
`Error` UInt32

Event ID 801: Client begins attempts to locate the WPAD configuration file: ConnectionName=ConnectionName, DetectFlags=DetectFlags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_SEARCH
Opcode: Start

Description

Client begins attempts to locate the WPAD configuration file: ConnectionName=ConnectionName, DetectFlags=DetectFlags.

Message #

Client begins attempts to locate the WPAD configuration file: ConnectionName=%2, DetectFlags=%3

Fields #

Name	Description
`_ConnectionNameLength` UInt16
`ConnectionName` UnicodeString
`DetectFlags` UInt32

Event ID 802: Begin search for configuration file using DHCP: Interface=Interface.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DHCP
Opcode: Start

Description

Begin search for configuration file using DHCP: Interface=Interface.

Message #

Begin search for configuration file using DHCP: Interface=%2

Fields #

Name	Description
`_InterfaceLength` UInt16
`Interface` UnicodeString

Event ID 803: WPAD configuration file found using DHCP: Interface=Interface, ConfigurationURL=ConfigurationURL.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DHCP
Opcode: Stop

Description

WPAD configuration file found using DHCP: Interface=Interface, ConfigurationURL=ConfigurationURL.

Message #

WPAD configuration file found using DHCP: Interface=%2, ConfigurationURL=%4

Fields #

Name	Description
`_InterfaceLength` UInt16
`Interface` UnicodeString
`_ConfigurationURLLength` UInt16
`ConfigurationURL` UnicodeString

Event ID 804: Search for WPAD configuration file using DHCP failed: Interface=Interface, ConfigurationURL=ConfigurationURL, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DHCP
Opcode: Fail

Description

Search for WPAD configuration file using DHCP failed: Interface=Interface, ConfigurationURL=ConfigurationURL, Error=Error.

Message #

Search for WPAD configuration file using DHCP failed: Interface=%2, ConfigurationURL=%4, Error=%5

Fields #

Name	Description
`_InterfaceLength` UInt16
`Interface` UnicodeString
`_ConfigurationURLLength` UInt16
`ConfigurationURL` UnicodeString
`Error` UInt32

Event ID 805: Begin search for configuration file using DNS: DetectFlags=DetectFlags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DNS
Opcode: Start

Description

Begin search for configuration file using DNS: DetectFlags=DetectFlags.

Message #

Begin search for configuration file using DNS: DetectFlags=%1

Fields #

Name	Description
`DetectFlags` UInt32

Event ID 806: WPAD configuration file found using DNS: ConfigurationURL=ConfigurationURL, DetectFlags=DetectFlags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DNS
Opcode: Stop

Description

WPAD configuration file found using DNS: ConfigurationURL=ConfigurationURL, DetectFlags=DetectFlags.

Message #

WPAD configuration file found using DNS: ConfigurationURL=%2, DetectFlags=%3

Fields #

Name	Description
`_ConfigurationURLLength` UInt16
`ConfigurationURL` UnicodeString
`DetectFlags` UInt32

Event ID 807: Search for WPAD configuration file using DNS failed: DetectFlags=DetectFlags, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DNS
Opcode: Fail

Description

Search for WPAD configuration file using DNS failed: DetectFlags=DetectFlags, Error=Error.

Message #

Search for WPAD configuration file using DNS failed: DetectFlags=%1, Error=%2

Fields #

Name	Description
`DetectFlags` UInt32
`Error` UInt32

Event ID 808: Search for WPAD configruation file failed: Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_SEARCH
Opcode: Fail

Description

Search for WPAD configruation file failed: Error=Error.

Message #

Search for WPAD configruation file failed: Error=%1

Fields #

Name	Description
`Error` UInt32

Event ID 809: Begin downloading the configuration file from the configuration URL: ConfigurationURL=ConfigurationURL.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DOWNLOAD
Opcode: Start

Description

Begin downloading the configuration file from the configuration URL: ConfigurationURL=ConfigurationURL.

Message #

Begin downloading the configuration file from the configuration URL: ConfigurationURL=%2

Fields #

Name	Description
`_ConfigurationURLLength` UInt16
`ConfigurationURL` UnicodeString

Event ID 810: Client successfully downloaded the configuration file from the configuration URL: ConfigurationURL=ConfigurationURL.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DOWNLOAD
Opcode: Stop

Description

Client successfully downloaded the configuration file from the configuration URL: ConfigurationURL=ConfigurationURL.

Message #

Client successfully downloaded the configuration file from the configuration URL: ConfigurationURL=%2

Fields #

Name	Description
`_ConfigurationURLLength` UInt16
`ConfigurationURL` UnicodeString

Event ID 811: Downloading the configuration file from the configuration URL failed: ConfigurationURL=ConfigurationURL, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DOWNLOAD
Opcode: Fail

Description

Downloading the configuration file from the configuration URL failed: ConfigurationURL=ConfigurationURL, Error=Error.

Message #

Downloading the configuration file from the configuration URL failed: ConfigurationURL=%2, Error=%3

Fields #

Name	Description
`_ConfigurationURLLength` UInt16
`ConfigurationURL` UnicodeString
`Error` UInt32

Event ID 812: The downloaded configuration file could not be used: ConfigurationURL=ConfigurationURL, MIMEType=MIMEType, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DOWNLOAD
Opcode: Fail

Description

The downloaded configuration file could not be used: ConfigurationURL=ConfigurationURL, MIMEType=MIMEType, Error=Error.

Message #

The downloaded configuration file could not be used: ConfigurationURL=%2, MIMEType=%4, Error=%5

Fields #

Name	Description
`_ConfigurationURLLength` UInt16
`ConfigurationURL` UnicodeString
`_MIMETypeLength` UInt16
`MIMEType` UnicodeString
`Error` UInt32

Event ID 813: Searching for Proxy Information for the URL: URL=URL.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_FIND_INFO_FOR_URL
Opcode: Start

Description

Searching for Proxy Information for the URL: URL=URL.

Message #

Searching for Proxy Information for the URL: URL=%2

Fields #

Name	Description
`_URLLength` UInt16
`URL` UnicodeString

Event ID 814: Client has successfully retrieved proxy data for accessing a specified resource: URL=URL, ProxyString=ProxyString.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_FIND_INFO_FOR_URL
Opcode: Stop

Description

Client has successfully retrieved proxy data for accessing a specified resource: URL=URL, ProxyString=ProxyString.

Message #

Client has successfully retrieved proxy data for accessing a specified resource: URL=%2, ProxyString=%4

Fields #

Name	Description
`_URLLength` UInt16
`URL` UnicodeString
`_ProxyStringLength` UInt16
`ProxyString` UnicodeString

Event ID 815: Error locating proxy information for the URL: URL=URL, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_FIND_INFO_FOR_URL
Opcode: Fail

Description

Error locating proxy information for the URL: URL=URL, Error=Error.

Message #

Error locating proxy information for the URL: URL=%2, Error=%3

Fields #

Name	Description
`_URLLength` UInt16
`URL` UnicodeString
`Error` UInt32

Event ID 816: Blocking autoproxy determination started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_BLOCKING_AUTOPROXY_DETERMINATION
Opcode: Start

Description

Blocking autoproxy determination started.

Message #

Blocking autoproxy determination started

Event ID 817: Blocking autoproxy determination stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_BLOCKING_AUTOPROXY_DETERMINATION
Opcode: Stop

Description

Blocking autoproxy determination stopped.

Message #

Blocking autoproxy determination stopped

Event ID 818: WinInet Activity Transfer Event

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_TRANSFER

Description

WinInet Activity Transfer Event.

Message #

WinInet Activity Transfer Event

Event ID 819: AutoProxy SWPAD Decision (WPADNetworkDecision) NumConnections (NetworkCount).

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_SWPAD

Description

AutoProxy SWPAD Decision (WPADNetworkDecision) NumConnections (NetworkCount).

Message #

AutoProxy SWPAD Decision (%1) NumConnections (%2)

Fields #

Name	Description
`WPADNetworkDecision` UInt32
`NetworkCount` UInt32

Event ID 820: Autoproxy host IP lookup started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_HOST_IP_LOOKUP
Opcode: Start

Description

Autoproxy host IP lookup started.

Message #

Autoproxy host IP lookup started

Event ID 821: Autoproxy host IP lookup stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_HOST_IP_LOOKUP
Opcode: Stop

Description

Autoproxy host IP lookup stopped.

Message #

Autoproxy host IP lookup stopped

Event ID 822: Autoproxy SWPAD lookup started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_SWPAD_LOOKUP
Opcode: Start

Description

Autoproxy SWPAD lookup started.

Message #

Autoproxy SWPAD lookup started

Event ID 823: Autoproxy SWPAD lookup stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_SWPAD_LOOKUP
Opcode: Stop

Description

Autoproxy SWPAD lookup stopped.

Message #

Autoproxy SWPAD lookup stopped

Event ID 824: Autoproxy Detection with SWPAD ON started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_KNOWN_DETECTION
Opcode: Start

Description

Autoproxy Detection with SWPAD ON started.

Message #

Autoproxy Detection with SWPAD ON started

Event ID 825: Autoproxy Detection with SWPAD ON stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_KNOWN_DETECTION
Opcode: Stop

Description

Autoproxy Detection with SWPAD ON stopped.

Message #

Autoproxy Detection with SWPAD ON stopped

Event ID 826: Autoproxy Detection with SWPAD UNKNOWN started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_UNKNOWN_DETECTION
Opcode: Start

Description

Autoproxy Detection with SWPAD UNKNOWN started.

Message #

Autoproxy Detection with SWPAD UNKNOWN started

Event ID 827: Autoproxy Detection with SWPAD UNKNOWN stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_UNKNOWN_DETECTION
Opcode: Stop

Description

Autoproxy Detection with SWPAD UNKNOWN stopped.

Message #

Autoproxy Detection with SWPAD UNKNOWN stopped

Event ID 828: Autoproxy Script Download Started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_SCRIPT_DOWNLOAD
Opcode: Start

Description

Autoproxy Script Download Started.

Message #

Autoproxy Script Download Started

Event ID 829: Autoproxy Script Download Stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_SCRIPT_DOWNLOAD
Opcode: Stop

Description

Autoproxy Script Download Stopped.

Message #

Autoproxy Script Download Stopped

Event ID 834: Autoproxy full scenario started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_ALL
Opcode: Start

Description

Autoproxy full scenario started.

Message #

Autoproxy full scenario started

Fields #

Name	Description
`UniqueId` UInt32

Event ID 835: Autoproxy full scenario stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_ALL
Opcode: Stop

Description

Autoproxy full scenario stopped.

Message #

Autoproxy full scenario stopped

Fields #

Name	Description
`UniqueId` UInt32

Event ID 901: Application offline check started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_APPLICATION_OFFLINE_CHECK
Opcode: Start

Description

Application offline check started.

Message #

Application offline check started

Fields #

Name	Description
`AppPackageSid` UnicodeString

Event ID 902: Application offline check complete

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_APPLICATION_OFFLINE_CHECK
Opcode: Stop

Description

Application offline check complete.

Message #

Application offline check complete

Fields #

Name	Description
`Result` UInt32
`Offline` Boolean

Event ID 1000: WININET_TEST_EVENT

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_TEST_EVENT

Fields #

Name	Description
`_TestStr0Length` UInt8
`TestStr0` AnsiString
`_TestStr1Length` UInt16
`TestStr1` AnsiString
`_TestStr2Length` UInt32
`TestStr2` AnsiString
`_TestStr0WLength` UInt8
`TestStr0W` UnicodeString
`_TestStr1WLength` UInt16
`TestStr1W` UnicodeString
`_TestStr2WLength` UInt32
`TestStr2W` UnicodeString
`TestStrLength` UInt16
`TestStr` AnsiString
`TestStrWLength` UInt16
`TestStrW` UnicodeString

Event ID 1007: Wininet_SendRequestStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SendRequest
Opcode: Start

Fields #

Name	Description
`Request` Pointer
`AddressName` AnsiString

Event ID 1008: Wininet_SendRequestStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SendRequest
Opcode: Stop

Fields #

Name	Description
`Request` Pointer
`StatusLineLength` UInt32
`StatusLine` AnsiString

Event ID 1009: Wininet_OfflineCacheLookup

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_OfflineCacheLookup

Fields #

Name	Description
`Request` Pointer

Event ID 1011: Wininet_OfflineCacheHit

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_OfflineCacheHit

Fields #

Name	Description
`Request` Pointer

Event ID 1013: Wininet_OfflineCacheMiss

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_OfflineCacheMiss

Fields #

Name	Description
`Request` Pointer

Event ID 1015: Wininet_PreNet_CacheLookup

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_PreNet_CacheLookup

Fields #

Name	Description
`Request` Pointer

Event ID 1017: Wininet_PreNet_CacheHit

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_PreNet_CacheHit

Fields #

Name	Description
`Request` Pointer

Event ID 1019: Wininet_PreNet_CacheMiss

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_PreNet_CacheMiss

Fields #

Name	Description
`Request` Pointer

Event ID 1021: Wininet_PostNet_CacheLookup

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_PostNet_CacheLookup

Fields #

Name	Description
`Request` Pointer

Event ID 1023: Wininet_PostNet_CacheHit

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_PostNet_CacheHit

Fields #

Name	Description
`Request` Pointer

Event ID 1025: Wininet_PostNet_CacheMiss

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_PostNet_CacheMiss

Fields #

Name	Description
`Request` Pointer

Event ID 1027: Wininet_AutodialIfNotLocalHostStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AutodialIfNotLocalHost
Opcode: Start

Fields #

Name	Description
`Request` Pointer
`HostName` AnsiString

Event ID 1028: Wininet_AutodialIfNotLocalHostStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AutodialIfNotLocalHost
Opcode: Stop

Fields #

Name	Description
`Request` Pointer

Event ID 1029: Wininet_ResolveHostStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_ResolveHost
Opcode: Start

Fields #

Name	Description
`Request` Pointer
`HostName` AnsiString

Event ID 1030: Wininet_ResolveHostStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_ResolveHost
Opcode: Stop

Fields #

Name	Description
`Request` Pointer
`HostName` AnsiString

Event ID 1031: Wininet_SendRequest_Main

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SendRequest_Main

Fields #

Name	Description
`Request` Pointer
`Size` UInt32

Event ID 1033: Wininet_SendRequest_Extra

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SendRequest_Extra

Fields #

Name	Description
`Request` Pointer
`Size` UInt32

Event ID 1035: Wininet_SendRequest_CRLF

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SendRequest_CRLF

Fields #

Name	Description
`Request` Pointer
`Size` UInt32

Event ID 1037: Wininet_ReadData

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_ReadData

Fields #

Name	Description
`Request` Pointer
`Size` UInt32

Event ID 1039: Wininet_ReadDataPostReceiveBuf

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_ReadDataPostReceiveBuf

Fields #

Name	Description
`Request` Pointer
`Size` UInt32

Event ID 1041: Wininet_SendRequest_PostReceiveBuf

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SendRequest_PostReceiveBuf

Fields #

Name	Description
`Request` Pointer
`Size` UInt32

Event ID 1043: Wininet_DrainResponsePostReceiveBuf

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DrainResponsePostReceiveBuf

Fields #

Name	Description
`Request` Pointer
`Size` UInt32

Event ID 1045: Wininet_ConnectStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Connect
Opcode: Start

Fields #

Name	Description
`Request` Pointer

Event ID 1046: Wininet_ConnectStop_V1

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Connect
Opcode: Stop

Fields #

Name	Description
`Request` Pointer
`Socket` UInt32
`Protocol` UInt32	Known values `0` HOPOPT `1` ICMP `2` IGMP `6` TCP `17` UDP `41` IPv6 `43` IPv6-Route `44` IPv6-Frag `47` GRE `50` ESP `51` AH `58` ICMPv6 `89` OSPF `103` PIM `132` SCTP
`LocalAddressLength` UInt32
`LocalAddress` Binary
`RemoteAddressLength` UInt32
`RemoteAddress` Binary

Event ID 1047: Wininet_LookupConnectionStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_LookupConnection
Opcode: Start

Fields #

Name	Description
`Request` Pointer

Event ID 1048: Wininet_LookupConnectionStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_LookupConnection
Opcode: Stop

Fields #

Name	Description
`Request` Pointer
`Socket` UInt32

Event ID 1049: Wininet_Redirect

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Redirect

Fields #

Name	Description
`Request` Pointer
`AddressName` AnsiString

Event ID 1051: Wininet_GetaddrinfoStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Getaddrinfo
Opcode: Start

Fields #

Name	Description
`Flags` UInt32
`AddressName` AnsiString

Event ID 1052: Wininet_GetaddrinfoStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Getaddrinfo
Opcode: Stop

Fields #

Name	Description
`error` UInt32
`Flags` UInt32
`AddressName` AnsiString

Event ID 1053: Wininet_DHCP_I252WPADStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DHCP_I252WPAD
Opcode: Start

Fields #

Name	Description
`Order` UInt32
`AddressName` AnsiString

Event ID 1054: Wininet_DHCP_I252WPADStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DHCP_I252WPAD
Opcode: Stop

Fields #

Name	Description
`error` UInt32
`AddressName` AnsiString

Event ID 1055: Wininet_SelectStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Select
Opcode: Start

Fields #

Name	Description
`Request` Pointer
`Flags` UInt32

Event ID 1056: Wininet_SelectStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Select
Opcode: Stop

Fields #

Name	Description
`Request` Pointer
`Flags` UInt32

Event ID 1057: Requested URL=URL Verb=Verb RequestHeaders=RequestHeaders ResponseHeaders=ResponseHeaders Status=Status Cache=UsageLogRequestCache.

Provider: Microsoft-Windows-WinINet
Channel: UsageLog
Task: Wininet_UsageLogRequest

Description

Requested URL=URL Verb=Verb RequestHeaders=RequestHeaders ResponseHeaders=ResponseHeaders Status=Status Cache=UsageLogRequestCache.

Message #

Requested URL=%1 Verb=%2 RequestHeaders=%3 ResponseHeaders=%4 Status=%5 Cache=%6

Fields #

Name	Description
`URL` AnsiString
`Verb` AnsiString
`RequestHeaders` AnsiString
`ResponseHeaders` AnsiString
`Status` UInt32	NTSTATUS reference
`UsageLogRequestCache` UInt32

Event ID 1058: Scavenged URL=URL.

Provider: Microsoft-Windows-WinINet
Channel: UsageLog
Task: Wininet_UsageLogScavenge

Description

Scavenged URL=URL.

Message #

Scavenged URL=%1

Fields #

Name	Description
`URL` AnsiString

Event ID 1059: Wininet_SocketConnectStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SocketConnect
Opcode: Start

Fields #

Name	Description
`Request` Pointer
`Socket` UInt32
`SourcePort` UInt32
`RemoteAddressIndex` UInt32

Event ID 1060: Wininet_SocketConnectStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SocketConnect
Opcode: Stop

Fields #

Name	Description
`Request` Pointer
`Socket` UInt32

Event ID 1061: Wininet_AppCacheLookupStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheLookup
Opcode: Start

Fields #

Name	Description
`URL` UnicodeString

Event ID 1062: Wininet_AppCacheLookupStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheLookup
Opcode: Stop

Fields #

Name	Description
`ManifestURL` UnicodeString

Event ID 1063: Wininet_RequestPrioritySet

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_RequestPrioritySet

Fields #

Name	Description
`Request` Pointer
`OldPriority` Int32
`NewPriority` Int32

Event ID 1064: WININET_STREAM_DATA_INDICATED

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_STREAM_DATA_INDICATED

Fields #

Name	Description
`RequestHandle` Pointer
`StreamId` UInt32
`Size` UInt32
`Headers` Boolean

Event ID 1065: Wininet_SecurityContextStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SecurityContext
Opcode: Start

Fields #

Name	Description
`Context` Pointer
`HostName` AnsiString
`NegotiationCount` UInt32
`Socket` UInt32

Event ID 1066: Wininet_SecurityContextStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SecurityContext
Opcode: Stop

Fields #

Name	Description
`Context` Pointer
`HostName` AnsiString
`NegotiationCount` UInt32
`Socket` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 1067: Wininet_SocketReceiveDelayStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SocketReceiveDelay
Opcode: Start

Fields #

Name	Description
`Request` Pointer
`Socket` UInt32

Event ID 1068: Wininet_SocketReceiveDelayStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SocketReceiveDelay
Opcode: Stop

Fields #

Name	Description
`Request` Pointer
`Socket` UInt32

Event ID 1069: Wininet_FileIOStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_FileIO
Opcode: Start

Fields #

Name	Description
`Handle` Pointer
`Operation` UInt32	Known values `%%2456` Open key file. `%%2457` Delete key file. `%%2458` Read persisted key from file. `%%2459` Write persisted key to file. `%%2464` Export of persistent cryptographic key. `%%2465` Import of persistent cryptographic key. `%%2480` Open Key. `%%2481` Create Key. `%%2482` Delete Key. `%%2483` Encrypt. `%%2484` Decrypt. `%%2485` Sign hash. `%%2486` Secret agreement. `%%2487` Domain settings. `%%2488` Local settings. `%%2489` Add provider. `%%2490` Remove provider. `%%2491` Add context. `%%2492` Remove context. `%%2493` Add function. `%%2494` Remove function. `%%2495` Add function provider. `%%2496` Remove function provider. `%%2497` Add function property. `%%2498` Remove function property. `%%2499` Machine key. `%%2500` User key. `%%2501` Key Derivation. `%%2502` Claim Creation. `%%2503` Claim Verification.
`ClientType` UInt32
`ThreadInfoUIType` UInt32
`IsSync` Boolean

Event ID 1070: Wininet_FileIOStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_FileIO
Opcode: Stop

Fields #

Name	Description
`Handle` Pointer
`Operation` UInt32	Known values `%%2456` Open key file. `%%2457` Delete key file. `%%2458` Read persisted key from file. `%%2459` Write persisted key to file. `%%2464` Export of persistent cryptographic key. `%%2465` Import of persistent cryptographic key. `%%2480` Open Key. `%%2481` Create Key. `%%2482` Delete Key. `%%2483` Encrypt. `%%2484` Decrypt. `%%2485` Sign hash. `%%2486` Secret agreement. `%%2487` Domain settings. `%%2488` Local settings. `%%2489` Add provider. `%%2490` Remove provider. `%%2491` Add context. `%%2492` Remove context. `%%2493` Add function. `%%2494` Remove function. `%%2495` Add function provider. `%%2496` Remove function provider. `%%2497` Add function property. `%%2498` Remove function property. `%%2499` Machine key. `%%2500` User key. `%%2501` Key Derivation. `%%2502` Claim Creation. `%%2503` Claim Verification.
`ClientType` UInt32
`ThreadInfoUIType` UInt32
`IsSync` Boolean

Event ID 1071: Wininet_FileIOStart1071

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_FileIO
Opcode: Start

Fields #

Name	Description
`Handle` Pointer
`Operation` UInt32	Known values `%%2456` Open key file. `%%2457` Delete key file. `%%2458` Read persisted key from file. `%%2459` Write persisted key to file. `%%2464` Export of persistent cryptographic key. `%%2465` Import of persistent cryptographic key. `%%2480` Open Key. `%%2481` Create Key. `%%2482` Delete Key. `%%2483` Encrypt. `%%2484` Decrypt. `%%2485` Sign hash. `%%2486` Secret agreement. `%%2487` Domain settings. `%%2488` Local settings. `%%2489` Add provider. `%%2490` Remove provider. `%%2491` Add context. `%%2492` Remove context. `%%2493` Add function. `%%2494` Remove function. `%%2495` Add function provider. `%%2496` Remove function provider. `%%2497` Add function property. `%%2498` Remove function property. `%%2499` Machine key. `%%2500` User key. `%%2501` Key Derivation. `%%2502` Claim Creation. `%%2503` Claim Verification.
`ClientType` UInt32
`ThreadInfoUIType` UInt32
`IsSync` Boolean
`DataLength` UInt32

Event ID 1072: Wininet_FileIOStop1072

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_FileIO
Opcode: Stop

Fields #

Name	Description
`Handle` Pointer
`Operation` UInt32	Known values `%%2456` Open key file. `%%2457` Delete key file. `%%2458` Read persisted key from file. `%%2459` Write persisted key to file. `%%2464` Export of persistent cryptographic key. `%%2465` Import of persistent cryptographic key. `%%2480` Open Key. `%%2481` Create Key. `%%2482` Delete Key. `%%2483` Encrypt. `%%2484` Decrypt. `%%2485` Sign hash. `%%2486` Secret agreement. `%%2487` Domain settings. `%%2488` Local settings. `%%2489` Add provider. `%%2490` Remove provider. `%%2491` Add context. `%%2492` Remove context. `%%2493` Add function. `%%2494` Remove function. `%%2495` Add function provider. `%%2496` Remove function provider. `%%2497` Add function property. `%%2498` Remove function property. `%%2499` Machine key. `%%2500` User key. `%%2501` Key Derivation. `%%2502` Claim Creation. `%%2503` Claim Verification.
`ClientType` UInt32
`ThreadInfoUIType` UInt32
`IsSync` Boolean

Event ID 1073: Wininet_AppCacheHandleStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString
`LocalFileName` UnicodeString

Event ID 1074: Wininet_AppCacheHandleStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1075: Wininet_AppCacheHandleStart1075

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Handle` Pointer
`Url` UnicodeString

Event ID 1076: Wininet_AppCacheHandleStop1076

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1077: Wininet_AppCacheHandleStart1077

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Handle` Pointer
`Url` UnicodeString

Event ID 1078: Wininet_AppCacheHandleStop1078

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1079: Wininet_AppCacheHandleStart1079

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`DataSize` UInt32

Event ID 1080: Wininet_AppCacheHandleStop1080

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1081: Wininet_AppCacheHandleStart1081

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1082: Wininet_AppCacheHandleStop1082

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1083: Wininet_AppCacheHandleStart1083

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString

Event ID 1084: Wininet_AppCacheHandleStop1084

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1085: Wininet_AppCacheHandleStart1085

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1086: Wininet_AppCacheHandleStop1086

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1087: Wininet_AppCacheHandleStart1087

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1088: Wininet_AppCacheHandleStop1088

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1089: Wininet_AppCacheServerContainerStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Handle` Pointer
`Directory` UnicodeString
`IsIEAppContainer` Boolean

Event ID 1090: Wininet_AppCacheServerContainerStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1091: Wininet_AppCacheServerContainerStart1091

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1092: Wininet_AppCacheServerContainerStop1092

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1093: Wininet_AppCacheServerContainerStart1093

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1094: Wininet_AppCacheServerContainerStop1094

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1095: Wininet_AppCacheServerContainerStart1095

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString

Event ID 1096: Wininet_AppCacheServerContainerStop1096

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1097: Wininet_AppCacheServerContainerStart1097

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString

Event ID 1098: Wininet_AppCacheServerContainerStop1098

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1099: Wininet_AppCacheServerContainerStart1099

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString
`Flags` UInt32

Event ID 1100: Wininet_AppCacheServerContainerStop1100

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1101: Wininet_AppCacheServerContainerStart1101

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`MasterUrl` UnicodeString
`ManifestURL` UnicodeString
`DataSize` UInt32
`EntryType` UInt32
`HeaderSize` UInt32

Event ID 1102: Wininet_AppCacheServerContainerStop1102

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1103: Wininet_AppCacheServerContainerStart1103

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1104: Wininet_AppCacheServerContainerStop1104

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1105: Wininet_AppCacheServerContainerStart1105

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1106: Wininet_AppCacheServerContainerStop1106

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1107: Wininet_AppCacheServerContainerStart1107

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1108: Wininet_AppCacheServerContainerStop1108

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1109: Wininet_AppCacheServerContainerStart1109

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1110: Wininet_AppCacheServerContainerStop1110

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1111: Wininet_BlobServerContainerStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Handle` Pointer
`Directory` UnicodeString

Event ID 1112: Wininet_BlobServerContainerStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1113: Wininet_BlobServerContainerStart1113

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1114: Wininet_BlobServerContainerStop1114

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1115: Wininet_BlobServerContainerStart1115

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1116: Wininet_BlobServerContainerStop1116

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1117: Wininet_BlobServerContainerStart1117

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString

Event ID 1118: Wininet_BlobServerContainerStop1118

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1119: Wininet_BlobServerContainerStart1119

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString

Event ID 1120: Wininet_BlobServerContainerStop1120

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1121: Wininet_BlobServerContainerStart1121

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString

Event ID 1122: Wininet_BlobServerContainerStop1122

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1123: Wininet_BlobServerContainerStart1123

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1124: Wininet_BlobServerContainerStop1124

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1125: Wininet_CacheClientBloomFilterStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheClientBloomFilter
Opcode: Start

Fields #

Name	Description
`Handle` Pointer

Event ID 1126: Wininet_CacheClientBloomFilterStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheClientBloomFilter
Opcode: Stop

Fields #

Name	Description
`HResult` UInt32

Event ID 1127: Wininet_CacheClientBloomFilterStart1127

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheClientBloomFilter
Opcode: Start

Event ID 1128: Wininet_CacheClientBloomFilterStop1128

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheClientBloomFilter
Opcode: Stop

Event ID 1129: Wininet_CookieServerContainerStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Handle` Pointer
`Directory` UnicodeString

Event ID 1130: Wininet_CookieServerContainerStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1131: Wininet_CookieServerContainerStart1131

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1132: Wininet_CookieServerContainerStop1132

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1133: Wininet_CookieServerContainerStart1133

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`MinimizedRDomain` UnicodeString

Event ID 1134: Wininet_CookieServerContainerStop1134

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1135: Wininet_CookieServerContainerStart1135

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1136: Wininet_CookieServerContainerStop1136

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1137: Wininet_CookieServerContainerStart1137

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Hash` Int64
`OperationCount` UInt32

Event ID 1138: Wininet_CookieServerContainerStop1138

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1139: Wininet_CookieServerContainerStart1139

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1140: Wininet_CookieServerContainerStop1140

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1141: Wininet_CacheClientCountersStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheClientCounters
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Handle` Pointer

Event ID 1142: Wininet_CacheClientCountersStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheClientCounters
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1143: Wininet_DependencyServerContainerStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString
`BlobSize` UInt32

Event ID 1144: Wininet_DependencyServerContainerStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1145: Wininet_DependencyServerContainerStart1145

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString

Event ID 1146: Wininet_DependencyServerContainerStop1146

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1147: Wininet_DependencyServerContainerStart1147

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1148: Wininet_DependencyServerContainerStop1148

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1149: Wininet_DependencyServerContainerStart1149

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Handle` Pointer
`IsCreateContainer` Boolean
`Directory` UnicodeString

Event ID 1150: Wininet_DependencyServerContainerStop1150

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1151: Wininet_DependencyServerContainerStart1151

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1152: Wininet_DependencyServerContainerStop1152

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1153: Wininet_HstsServerContainerStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Handle` Pointer
`Directory` UnicodeString

Event ID 1154: Wininet_HstsServerContainerStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1155: Wininet_HstsServerContainerStart1155

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1156: Wininet_HstsServerContainerStop1156

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1157: Wininet_HstsServerContainerStart1157

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`MinimizedRDomain` UnicodeString
`Hash` Int64

Event ID 1158: Wininet_HstsServerContainerStop1158

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1159: Wininet_HstsServerContainerStart1159

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Hash` Int64
`HstsEntryCount` UInt32

Event ID 1160: Wininet_HstsServerContainerStop1160

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1161: Wininet_HstsServerContainerStart1161

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1162: Wininet_HstsServerContainerStop1162

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1163: Wininet_CacheServerConnectionStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerConnection
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1164: Wininet_CacheServerConnectionStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerConnection
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1165: Wininet_CacheServerConnectionStart1165

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerConnection
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Handle` Pointer

Event ID 1166: Wininet_CacheServerConnectionStop1166

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerConnection
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1167: Wininet_CacheServerEntryEnumStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerEntryEnum
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1168: Wininet_CacheServerEntryEnumStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerEntryEnum
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1169: Wininet_CacheServerEntryEnumStart1169

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerEntryEnum
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Handle` Pointer
`Filter` UInt32
`GroupId` Int64

Event ID 1170: Wininet_CacheServerEntryEnumStop1170

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerEntryEnum
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1171: Wininet_CacheServerEntryEnumStart1171

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerEntryEnum
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1172: Wininet_CacheServerEntryEnumStop1172

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerEntryEnum
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1173: Wininet_CacheServerContainerStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`EntryMaxAge` UInt32

Event ID 1174: Wininet_CacheServerContainerStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1175: Wininet_CacheServerContainerStart1175

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Type` UInt32
`Flags` UInt32
`Url` UnicodeString
`Redirect` UnicodeString
`Filename` UnicodeString
`Extension` UnicodeString

Event ID 1176: Wininet_CacheServerContainerStop1176

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1177: Wininet_CacheServerContainerStart1177

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString
`ValidateCreationTime` Boolean

Event ID 1178: Wininet_CacheServerContainerStop1178

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1179: Wininet_CacheServerContainerStart1179

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString
`Flags` UInt32

Event ID 1180: Wininet_CacheServerContainerStop1180

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1181: Wininet_CacheServerContainerStart1181

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1182: Wininet_CacheServerContainerStop1182

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1183: Wininet_CacheServerContainerStart1183

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString

Event ID 1184: Wininet_CacheServerContainerStop1184

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1185: Wininet_CacheServerContainerStart1185

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString
`Type` UInt32

Event ID 1186: Wininet_CacheServerContainerStop1186

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1187: Wininet_CacheServerContainerStart1187

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString

Event ID 1188: Wininet_CacheServerContainerStop1188

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1189: Wininet_CacheServerContainerStart1189

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString
`Fields` UInt32

Event ID 1190: Wininet_CacheServerContainerStop1190

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1191: Wininet_CacheServerContainerStart1191

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1192: Wininet_CacheServerContainerStop1192

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1193: Wininet_CacheServerContainerStart1193

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1194: Wininet_CacheServerContainerStop1194

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1195: Wininet_CacheServerContainerStart1195

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Limit` Int64

Event ID 1196: Wininet_CacheServerContainerStop1196

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1197: Wininet_CacheServerContainerStart1197

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Factor` UInt32
`Filter` UInt32

Event ID 1198: Wininet_CacheServerContainerStop1198

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1199: Wininet_CacheServerContainerStart1199

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1200: Wininet_CacheServerContainerStop1200

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1201: Wininet_CacheServerContainerStart1201

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1202: Wininet_CacheServerContainerStop1202

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1203: Wininet_CacheServerContainerStart1203

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Filename` UnicodeString

Event ID 1204: Wininet_CacheServerContainerStop1204

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1205: Wininet_CacheServerContainerStart1205

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Flags` UInt32

Event ID 1206: Wininet_CacheServerContainerStop1206

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1207: Wininet_CacheServerContainerStart1207

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`GroupId` Int64
`Flags` UInt32

Event ID 1208: Wininet_CacheServerContainerStop1208

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1209: Wininet_CacheServerContainerStart1209

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1210: Wininet_CacheServerContainerStop1210

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1211: Wininet_CacheServerContainerStart1211

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`GroupId` Int64

Event ID 1212: Wininet_CacheServerContainerStop1212

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1213: Wininet_CacheServerContainerStart1213

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`GroupId` Int64
`Flags` UInt32

Event ID 1214: Wininet_CacheServerContainerStop1214

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1215: Wininet_CacheServerContainerStart1215

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Url` UnicodeString
`GroupId` Int64
`Flags` UInt32

Event ID 1216: Wininet_CacheServerContainerStop1216

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1217: Wininet_CacheServerContainerStart1217

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer
`Handle` Pointer
`Name` UnicodeString
`Directory` UnicodeString
`Flags` UInt32
`Limit` Int64
`EntryMaxAge` UInt32

Event ID 1218: Wininet_CacheServerContainerStop1218

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1219: Wininet_CacheServerContainerStart1219

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer

Event ID 1220: Wininet_CacheServerContainerStop1220

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer
`HResult` UInt32

Event ID 1221: Wininet_UrlCacheContainerStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Fields #

Name	Description
`TargetSize` Int64
`Filter` UInt32

Event ID 1222: Wininet_UrlCacheContainerStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Fields #

Name	Description
`TargetSize` Int64
`Filter` UInt32

Event ID 1223: Wininet_UrlCacheContainerStart1223

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Event ID 1224: Wininet_UrlCacheContainerStop1224

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Event ID 1225: Wininet_UrlCacheContainerStart1225

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Event ID 1226: Wininet_UrlCacheContainerStop1226

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Event ID 1227: Wininet_UrlCacheContainerStart1227

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Fields #

Name	Description
`Name` UnicodeString
`Prefix` UnicodeString
`Directory` UnicodeString
`RootPath` UnicodeString
`Limit` Int64
`Options` UInt32

Event ID 1228: Wininet_UrlCacheContainerStop1228

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Fields #

Name	Description
`Name` UnicodeString
`Prefix` UnicodeString
`Directory` UnicodeString
`RootPath` UnicodeString
`Limit` Int64
`Options` UInt32

Event ID 1229: Wininet_UrlCacheContainerStart1229

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Fields #

Name	Description
`Name` UnicodeString
`RootPath` UnicodeString

Event ID 1230: Wininet_UrlCacheContainerStop1230

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Fields #

Name	Description
`Name` UnicodeString
`RootPath` UnicodeString

Event ID 1231: Wininet_UrlCacheContainerStart1231

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Fields #

Name	Description
`RootPath` UnicodeString

Event ID 1232: Wininet_UrlCacheContainerStop1232

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Fields #

Name	Description
`RootPath` UnicodeString

Event ID 1233: Wininet_UrlCacheContainerStart1233

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Fields #

Name	Description
`LimitType` UInt32
`Limit` Int64

Event ID 1234: Wininet_UrlCacheContainerStop1234

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Fields #

Name	Description
`LimitType` UInt32
`Limit` Int64

Event ID 1235: Wininet_UrlCacheContainerStart1235

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Fields #

Name	Description
`LimitType` UInt32

Event ID 1236: Wininet_UrlCacheContainerStop1236

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Fields #

Name	Description
`LimitType` UInt32

Event ID 1237: Wininet_UrlCacheContainerStart1237

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Event ID 1238: Wininet_UrlCacheContainerStop1238

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Event ID 1239: Wininet_SyncInternetOpen

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncInternetOpen

Event ID 1240: Wininet_SyncSendRequestStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncSendRequest
Opcode: Start

Event ID 1241: Wininet_SyncSendRequestStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncSendRequest
Opcode: Stop

Event ID 1242: Wininet_SyncQueryDataAvailableStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncQueryDataAvailable
Opcode: Start

Event ID 1243: Wininet_SyncQueryDataAvailableStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncQueryDataAvailable
Opcode: Stop

Event ID 1244: Wininet_SyncReadFileStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncReadFile
Opcode: Start

Event ID 1245: Wininet_SyncReadFileStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncReadFile
Opcode: Stop

Event ID 1246: Wininet_SyncWriteFileStart

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncWriteFile
Opcode: Start

Event ID 1247: Wininet_SyncWriteFileStop

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncWriteFile
Opcode: Stop

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID 43d1a55c-76d6-4f7e-995c-64c711e5cafe

Defined in wininet.dll, which carries the event manifest.

Observed on:

WS2022-20348.4893, schema read from the registered manifest, binary version 11.00.20348.1, captured 2026-06-02
Win11-26200.6584, schema read from the registered manifest, binary version 11.00.26100.1, captured 2026-06-02

`j` / `k`	Scroll down / up
`d` / `u`	Half-page down / up
`gg` / `G`	Top / bottom
`h` / `l`	History back / forward
`f`	Follow link (`Shift` = new tab)
`/`	Focus search
`?`	Toggle this help
`↑` / `↓`	Navigate search results
`Enter`	Open highlighted result
`Esc`	Close results / dialog

`type:`	`events` / `rules` / `providers`
`vendor:`	`sigma` / `elastic` / `splunk` / `kusto` / `chronicle` (vendor name alone also works: `sigma:`, `kql:`, `secops:`…)
`tactic:`	TA-id, slug, or name: `credential_access`, `TA0006`
`technique:`	technique or sub-technique ID: `T1003`, `T1003.001` (alias `tech:`)
`severity:`	`critical` / `high` / `medium` / `low` / `informational` (alias `sev:`)
`risk_score`	Numeric comparison on the Elastic risk score (0 to 100): `risk_score>50`, `risk_score<=20`, `risk_score=99` (alias `risk`; Elastic rules only)
`stages:`	Rules with exactly N pipeline stages
`correlation:`	`single_event` / `sequence` / `alternatives` / `alternatives_cross_log` / `all_required` / `correlated`
`with:`	Co-occurrence event-id; stacks (`with:4624 with:4769`) to require all, while a comma list in one occurrence (`with:4624,4769`) is an either-or group. Implies multi-event
`like:`	Structural neighbors of a rule slug (equivalents + subsumption stricter / broader): `like:comsvcs_lsass_memory_dump-splunk-sysmon`
`groupby:`	Entity-grouping substring match against `group_by_keys`: `groupby:user`, `groupby:host`
`uses:`	Rules whose predicate tree touches the field (any kind, any value): `uses:CommandLine`
`excludes:`	Rules with top-level `not()` clauses on the field (FP whitelists): `excludes:ParentImage`
`field:` / `value:`	Predicate search; narrows rule cards to those with a matching leaf and drives the indicator tier. Unquoted = substring, wildcards allowed (`value:mimikatz`)
`indicator:`	Shorthand for `field:F value:V`: `indicator:Image=*\powershell.exe`
`kind:`	Filter by predicate kind. Narrows rule cards to those carrying a matching predicate leaf (`vendor:elastic kind:cidr_match`) and drives the indicator tier: `contains` / `starts_with` / `ends_with` / `regex` / `cidr` / `eq` / `in` … (operator aliases `op:`/`match:`)
`has:` / `no:`	`sample`, `field`, `notes`, `refs`, `trace`, `thirdparty`, `rule`, `pattern`, `timewindow`, `threshold`, `newterms`, `sigma`/`elastic`/`splunk`/`kusto`/`chronicle`
`-op:val`	Exclude matches; works on most operators but not `type:`/`like:`/`has:`/`no:` (use `no:<flag>` to exclude a rule flag): `tactic:execution -vendor:splunk`. Standalone `-kind:`/`-field:`/`-value:` drop every rule carrying a matching predicate leaf (`type:rules -kind:is_null`)
`field:"…"` / `value:"…"`	Quoted value = anchored exact match (also allows spaces): `value:"net user"`
`a,b`	Comma = OR inside one operator (`vendor:sigma,elastic`, `severity:high,critical`); repeating a facet merges the same way. `field:`/`value:` never split (literal commas)
`vendors:` / `stage:`	Singular and plural spellings fold to the canonical operator and value: `tactics:` = `tactic:`, `type:event` = `type:events`, `correlation:sequences` = `correlation:sequence`, `has:thresholds` = `has:threshold`
`"quoted phrase"`	Exact-match a multi-word phrase (free text)