Microsoft-Windows-wmbclass

Event	Title	Channel	Sample	Rule
1	Driver loaded	Trace	N	N
2	[Instance] Miniport initialize called.	Trace	N	N
3	[Instance] Miniport Halt called.	Trace	N	N
4	[Instance] Miniport Initialize exited with status=Status.	Trace	N	N
5	[Instance] Miniport Halt exited with status=Status.	Trace	N	N
6	[Instance] Miniport PAUSE called.	Trace	N	N
7	[Instance] Miniport PAUSE exited with status=Status.	Trace	N	N
8	[Instance] Miniport RESTART called.	Trace	N	N
9	[Instance] Miniport RESTART exited with status=Status.	Trace	N	N
10	[Instance] Miniport RESET called.	Trace	N	N
11	[Instance] Miniport RESET exited with status=Status.	Trace	N	N
12	[Instance] Miniport RESET completed async with status=Status.	Trace	N	N
13	[Instance] Miniport PAUSE completed async with status=Status.	Trace	N	N
14	[Instance] Miniport RESTART completed async with status=Status.	Trace	N	N
15	[.	Trace	N	N
16	[Instance] Miniport REQUEST exited with status=Status, Request=Request.	Trace	N	N
17	[.	Trace	N	N
18	[.	Trace	N	N
19	[Instance] Indicating status StatusCode=Status, Handle=RequestId, …	Trace	N	N
20	[Instance] Sent NBL queued NBL.	Trace	N	N
21	[.	Trace	N	N
100	[Instance] Usb Device descriptor Class=Class, SubClass=SubClass, …	Trace	N	N
101	[Instance] USB_CONFIG_DESC_BAD.	Trace	N	N
102	[Instance] Missing functional Desc, ECM=ECMFuncDescpresent, …	Trace	N	N
103	[Instance] Require Communications and Data insterfaces were not found.	Trace	N	N
104	[Instance] INTERFACE_DESC Num=bInterfaceNumber, Class=bInterfaceClass, …	Trace	N	N
105	[Instance] Interrupt pipe read completed with BytesRead bytes.	Trace	N	N
106	[Instance] received CDC_NOTIFICATION bmRequestType=bmRequestType, …	Trace	N	N
107	[.	Trace	N	N
108	[Instance] Send encapsulted command MessageType=MessageType, …	Trace	N	N
109	[Instance] Get encapsulated response MessageType=MessageType, …	Trace	N	N
110	[Instance] Control transfer failed Status=Status, ToHostToHost, Request=Request, …	Trace	N	N
111	[Instance] Inteerupt Pipe read failed Status=Status.	Trace	N	N
112	[Instance] Bulk Out transfer failed Status=Status.	Trace	N	N
113	[Instance] Bulk In transfer failed Status=Status.	Trace	N	N
114	[Instance] Host detected MBIM error ErrorCode for command CommandName.	Trace	N	N
115	[Instance] Device detected MBIM error ErrorCode for command CommandName.	Trace	N	N
116	[Instance] Device returned an invalid NTB of size ErrorCode.	Trace	N	N
117	Sending command with the following parameters.	Analytic	N	N
118	Sending command completed with status NdisStatus.	Analytic	N	N
119	ResponseType response received with the following parameters.	Analytic	N	N
120	Dumping adapter state -.	Analytic	N	N
121	Dumping adapter port state -.	Analytic	N	N
122	[Instance] Device [DeviceId] Wait/Wake IRP is completed.	Trace	N	N
123	Device [DeviceId] initial radio state is HwRadioState HwRadioState, SwRadioState …	Trace	N	N

Event ID 1: Driver loaded

Channel: Trace
Opcode: Info

Fields #

Name	Description
`DeviceObject` UnicodeString

Event ID 2: [Instance] Miniport initialize called.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport initialize called

Fields #

Name	Description
`Instance` UInt32

Event ID 3: [Instance] Miniport Halt called.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport Halt called

Fields #

Name	Description
`Instance` UInt32

Event ID 4: [Instance] Miniport Initialize exited with status=Status.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport Initialize exited with status=%2

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 5: [Instance] Miniport Halt exited with status=Status.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport Halt exited with status=%2

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 6: [Instance] Miniport PAUSE called.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport PAUSE called

Fields #

Name	Description
`Instance` UInt32

Event ID 7: [Instance] Miniport PAUSE exited with status=Status.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport PAUSE exited with status=%2

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 8: [Instance] Miniport RESTART called.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport RESTART called

Fields #

Name	Description
`Instance` UInt32

Event ID 9: [Instance] Miniport RESTART exited with status=Status.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport RESTART exited with status=%2

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 10: [Instance] Miniport RESET called.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport RESET called

Fields #

Name	Description
`Instance` UInt32

Event ID 11: [Instance] Miniport RESET exited with status=Status.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport RESET exited with status=%2

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 12: [Instance] Miniport RESET completed async with status=Status.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport RESET completed async with status=%2

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 13: [Instance] Miniport PAUSE completed async with status=Status.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport PAUSE completed async with status=%2

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 14: [Instance] Miniport RESTART completed async with status=Status.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport RESTART completed async with status=%2

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 15: [.

Channel: Trace
Opcode: Info

Description

[Instance] Miniport Request called Request=Request, OID=OID, OID name=OIDname RequestId=RequestId, RequestHandle=RequestHandle, Type=Type, InformationLength=InformationLength.

Message #

[%1] Miniport Request called Request=%2, OID=%3, OID name=%4 RequestId=%5, RequestHandle=%6, Type=%7, InformationLength=%8

Fields #

Name	Description
`Instance` UInt32
`Request` Pointer
`OID` UInt32
`OIDname` AnsiString
`RequestId` Pointer
`RequestHandle` Pointer
`Type` UInt32
`InformationLength` UInt32

Event ID 16: [Instance] Miniport REQUEST exited with status=Status, Request=Request.

Channel: Trace
Opcode: Info

Message #

[%1] Miniport REQUEST exited with status=%3, Request=%2

Fields #

Name	Description
`Instance` UInt32
`Request` Pointer
`Status` UInt32	NTSTATUS reference

Event ID 17: [.

Channel: Trace
Opcode: Info

Description

[Instance] Miniport REQUEST exited with status=Status, Request=Request, OID=OID, OID name=OIDname RequestId=RequestId, RequestHandle=RequestHandle, Type=Type, BytesUsed=BytesUsed, BYtesNeeded=BytesNeeded.

Message #

[%1] Miniport REQUEST exited with status=%10, Request=%2, OID=%3, OID name=%4 RequestId=%5, RequestHandle=%6, Type=%7, BytesUsed=%8, BYtesNeeded=%9

Fields #

Name	Description
`Instance` UInt32
`Request` Pointer
`OID` UInt32
`OIDname` AnsiString
`RequestId` Pointer
`RequestHandle` Pointer
`Type` UInt32
`BytesUsed` UInt32
`BytesNeeded` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 18: [.

Channel: Trace
Opcode: Info

Description

[Instance] Miniport REQUEST completed async with status=Status, Request=Request, OID=OID, OID name=OIDname RequestId=RequestId, RequestHandle=RequestHandle, Type=Type, BytesUsed=BytesUsed, BYtesNeeded=BytesNeeded.

Message #

[%1] Miniport REQUEST completed async with status=%10, Request=%2, OID=%3, OID name=%4 RequestId=%5, RequestHandle=%6, Type=%7, BytesUsed=%8, BYtesNeeded=%9

Fields #

Name	Description
`Instance` UInt32
`Request` Pointer
`OID` UInt32
`OIDname` AnsiString
`RequestId` Pointer
`RequestHandle` Pointer
`Type` UInt32
`BytesUsed` UInt32
`BytesNeeded` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 19: [Instance] Indicating status StatusCode=Status, Handle=RequestId, RequestId=RequestHandle, BufferSize=BufferSize.

Channel: Trace
Opcode: Info

Message #

[%1] Indicating status StatusCode=%2, Handle=%3, RequestId=%4, BufferSize=%5

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference
`RequestId` Pointer
`RequestHandle` Pointer
`BufferSize` UInt32

Event ID 20: [Instance] Sent NBL queued NBL.

Channel: Trace
Opcode: Info

Message #

[%1] Sent NBL queued %2

Fields #

Name	Description
`Instance` UInt32
`NBL` Pointer

Event ID 21: [.

Channel: Trace
Opcode: Info

Description

[Instance] Send NBL completed NBL=NBL, Status=Status.

Message #

[%1] Send NBL completed NBL=%2, Status=%3

Fields #

Name	Description
`Instance` UInt32
`NBL` Pointer
`Status` UInt32	NTSTATUS reference

Event ID 100: [Instance] Usb Device descriptor Class=Class, SubClass=SubClass, Protocol=Protocol, Configs=Configs.

Channel: Trace
Opcode: Info

Message #

[%1] Usb Device descriptor Class=%2, SubClass=%3, Protocol=%4, Configs=%5

Fields #

Name	Description
`Instance` UInt32
`Class` UInt8
`SubClass` UInt8
`Protocol` UInt8	Known values `0` HOPOPT `1` ICMP `2` IGMP `6` TCP `17` UDP `41` IPv6 `43` IPv6-Route `44` IPv6-Frag `47` GRE `50` ESP `51` AH `58` ICMPv6 `89` OSPF `103` PIM `132` SCTP
`Configs` UInt8

Event ID 101: [Instance] USB_CONFIG_DESC_BAD.

Channel: Trace
Opcode: Info

Message #

[%1] USB_CONFIG_DESC_BAD

Fields #

Name	Description
`Instance` UInt32

Event ID 102: [Instance] Missing functional Desc, ECM=ECMFuncDescpresent, NCM=NCMFuncDescpresent, MBIM=MBIMFuncDescpresent.

Channel: Trace
Opcode: Info

Message #

[%1] Missing functional Desc, ECM=%2, NCM=%3, MBIM=%4

Fields #

Name	Description
`Instance` UInt32
`ECMFuncDescpresent` UInt8
`NCMFuncDescpresent` UInt8
`MBIMFuncDescpresent` UInt8

Event ID 103: [Instance] Require Communications and Data insterfaces were not found.

Channel: Trace
Opcode: Info

Message #

[%1] Require Communications and Data insterfaces were not found

Fields #

Name	Description
`Instance` UInt32

Event ID 104: [Instance] INTERFACE_DESC Num=bInterfaceNumber, Class=bInterfaceClass, SubClass=bInterfaceSubClass, Protocol=bInterfaceProtocol, AltSetting=bAlternateSetting, EndPoints=bNumEndPoints.

Channel: Trace
Opcode: Info

Message #

[%1] INTERFACE_DESC  Num=%2, Class=%3, SubClass=%4, Protocol=%5, AltSetting=%6, EndPoints=%7

Fields #

Name	Description
`Instance` UInt32
`bInterfaceNumber` UInt8
`bInterfaceClass` UInt8
`bInterfaceSubClass` UInt8
`bInterfaceProtocol` UInt8
`bAlternateSetting` UInt8
`bNumEndPoints` UInt8

Event ID 105: [Instance] Interrupt pipe read completed with BytesRead bytes.

Channel: Trace
Opcode: Info

Message #

[%1] Interrupt pipe read completed with %2 bytes

Fields #

Name	Description
`Instance` UInt32
`BytesRead` UInt32

Event ID 106: [Instance] received CDC_NOTIFICATION bmRequestType=bmRequestType, bNotificationCode=bNotificationCode wValue=wValue, wIndex=wIndex, wLength=wLength.

Channel: Trace
Opcode: Info

Message #

[%1] received CDC_NOTIFICATION bmRequestType=%2, bNotificationCode=%3 wValue=%4, wIndex=%5, wLength=%6

Fields #

Name	Description
`Instance` UInt32
`bmRequestType` UInt8
`bNotificationCode` UInt8
`wValue` UInt16
`wIndex` UInt16
`wLength` UInt16

Event ID 107: [.

Channel: Trace
Opcode: Info

Description

[Instance] Error from Intterupt pipe Status=Status, USBD Status=UsdbStatus.

Message #

[%1] Error from Intterupt pipe Status=%2, USBD Status=%3

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference
`UsdbStatus` UInt32

Event ID 108: [Instance] Send encapsulted command MessageType=MessageType, MessageLength=MessageLength, TransactionId=MessageTransactionId, TotalFrags=TotalFragments, CurrentFrag=CurrentFragment, ServiceId=Servi...

Channel: Trace
Opcode: Info

Description

[Instance] Send encapsulted command MessageType=MessageType, MessageLength=MessageLength, TransactionId=MessageTransactionId, TotalFrags=TotalFragments, CurrentFrag=CurrentFragment, ServiceId=ServiceId, CID=CID, CommandType=CommandType, InfoLength=InfoLength.

Message #

[%1] Send encapsulted command MessageType=%2, MessageLength=%3, TransactionId=%4, TotalFrags=%5, CurrentFrag=%6, ServiceId=%7, CID=%8, CommandType=%9, InfoLength=%10

Fields #

Name	Description
`Instance` UInt32
`MessageType` UInt32
`MessageLength` UInt32
`MessageTransactionId` UInt32
`TotalFragments` UInt32
`CurrentFragment` UInt32
`ServiceId` GUID
`CID` UInt32
`CommandType` UInt32
`InfoLength` UInt32

Event ID 109: [Instance] Get encapsulated response MessageType=MessageType, MessageLength=MessageLength, TransactionId=MessageTransactionId, TotalFrags=TotalFragments, CurrentFrag=CurrentFragment, ServiceId=Serv...

Channel: Trace
Opcode: Info

Description

[Instance] Get encapsulated response MessageType=MessageType, MessageLength=MessageLength, TransactionId=MessageTransactionId, TotalFrags=TotalFragments, CurrentFrag=CurrentFragment, ServiceId=ServiceId, CID=CID, Status=Status, InfoLength=InfoLength.

Message #

[%1] Get encapsulated response MessageType=%2, MessageLength=%3, TransactionId=%4, TotalFrags=%5, CurrentFrag=%6, ServiceId=%7, CID=%8, Status=%9, InfoLength=%10

Fields #

Name	Description
`Instance` UInt32
`MessageType` UInt32
`MessageLength` UInt32
`MessageTransactionId` UInt32
`TotalFragments` UInt32
`CurrentFragment` UInt32
`ServiceId` GUID
`CID` UInt32
`Status` UInt32	NTSTATUS reference
`InfoLength` UInt32

Event ID 110: [Instance] Control transfer failed Status=Status, ToHostToHost, Request=Request, Size=Length.

Channel: Trace
Opcode: Info

Message #

[%1] Control transfer failed Status=%2, ToHost%3, Request=%4, Size=%5

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference
`ToHost` Boolean
`Request` UInt8
`Length` UInt32

Event ID 111: [Instance] Inteerupt Pipe read failed Status=Status.

Channel: Trace
Opcode: Info

Message #

[%1] Inteerupt Pipe read failed Status=%2

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 112: [Instance] Bulk Out transfer failed Status=Status.

Channel: Trace
Opcode: Info

Message #

[%1] Bulk Out transfer failed Status=%2,

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 113: [Instance] Bulk In transfer failed Status=Status.

Channel: Trace
Opcode: Info

Message #

[%1] Bulk In transfer failed Status=%2,

Fields #

Name	Description
`Instance` UInt32
`Status` UInt32	NTSTATUS reference

Event ID 114: [Instance] Host detected MBIM error ErrorCode for command CommandName.

Channel: Trace
Opcode: Info

Message #

[%1] Host detected MBIM error %2 for command %6.

Fields #

Name	Description
`Instance` UInt32
`ErrorCode` UInt32
`TransactionId` UInt32
`ServiceId` GUID
`CommandId` UInt32
`CommandName` AnsiString

Event ID 115: [Instance] Device detected MBIM error ErrorCode for command CommandName.

Channel: Trace
Opcode: Info

Message #

[%1] Device detected MBIM error %2 for command %6.

Fields #

Name	Description
`Instance` UInt32
`ErrorCode` UInt32
`TransactionId` UInt32
`ServiceId` GUID
`CommandId` UInt32
`CommandName` AnsiString

Event ID 116: [Instance] Device returned an invalid NTB of size ErrorCode.

Channel: Trace
Opcode: Info

Message #

[%1] Device returned an invalid NTB of size %2.

Fields #

Name	Description
`Instance` UInt32
`ErrorCode` UInt32

Event ID 117: Sending command with the following parameters.

Channel: Analytic
Opcode: Info

Message #

Sending command with the following parameters:
Caller Request Id: %1
Driver Request Id: %2
Service Id: %3
Command Name: %4
Command Id: %5
Payload Length: %6
Payload: %7

Fields #

Name	Description
`CallerRequestId` UInt32
`DriverRequestId` UInt32
`ServiceId` GUID
`CommandName` AnsiString
`CommandId` UInt32
`InBufferSize` UInt32
`Payload` Binary

Event ID 118: Sending command completed with status NdisStatus.

Channel: Analytic
Opcode: Info

Description

Sending command completed with status NdisStatus. Command was sent with the following parameters.

Message #

Sending command completed with status %8. Command was sent with the following parameters:
Caller Request Id: %1
Driver Request Id: %2
Service Id: %3
Command Name: %4
Command Id: %5
Payload Length: %6
Payload: %7

Fields #

Name	Description
`CallerRequestId` UInt32
`DriverRequestId` UInt32
`ServiceId` GUID
`CommandName` AnsiString
`CommandId` UInt32
`InBufferSize` UInt32
`Payload` Binary
`NdisStatus` UInt32

Event ID 119: ResponseType response received with the following parameters.

Channel: Analytic
Opcode: Info

Message #

%1 response received with the following parameters:
Caller Request Id: %2
Driver Request Id: %3
Service Id: %4
Command Name: %5
Command Id: %6
Device Status: %7
Ndis Status: %8
Payload Length: %9
Payload: %10

Fields #

Name	Description
`ResponseType` AnsiString
`CallerRequestId` UInt32
`DriverRequestId` UInt32
`ServiceId` GUID
`CommandName` AnsiString
`CommandId` UInt32
`DeviceStatus` UInt32
`NdisStatus` UInt32
`BufferSize` UInt32
`Payload` Binary

Event ID 120: Dumping adapter state -.

Channel: Analytic
Opcode: Info

Message #

Dumping adapter state - 
Friendly Name: %1
Interface Index: %2
Mac Address: %3
Interface Guid: %4
Radio Off: %5
Maximum Link Speed: %6
Current Link Speed: %7
Uplink Speed: %8
Downlink Speed: %9
Available Data Class: %10
Available Data Class Valid: %11
Supported Cellular Class: %12
Current Cellular Class: %13
Transmitted NBLs: %14
Discarded Transmit NBLs: %15
Received NBLs: %16
Discarded Received NBLs: %17
Maximum Sessions: %18
Active Port Count: %19
Reference Count: %20
Pending request count: %21

Fields #

Name	Description
`FriendlyName` AnsiString
`IfIndex` UInt32
`MacAddress` Binary
`NetCfgId` GUID
`RadioOff` Boolean
`MaxLinkSpeed` UInt64
`CurrentLinkSpeed` UInt64
`UplinkSpeed` UInt64
`DownlinkSpeed` UInt64
`AvailableDataClass` UInt32
`AvailableDataClassValid` Boolean
`AdapterSupportedCellularClass` UInt32
`AdapterCurrentCellularClass` UInt32
`GenXmitFramesOk` UInt64
`GenXmitFramesDiscard` UInt64
`GenReceiveFramesOk` UInt64
`GenReceiveFramesDiscard` UInt64
`MaxActivatedContexts` UInt32
`ActivePortCount` UInt32
`RefCount` UInt32
`PendingRequestCount` UInt32

Event ID 121: Dumping adapter port state -.

Channel: Analytic
Opcode: Info

Message #

Dumping adapter port state - 
Port Number: %1
Connected: %2
Connection Id: %3
Session Id: %4
Reference Count: %5

Fields #

Name	Description
`PortNumber` UInt32
`Connected` Boolean
`ConnectionId` UInt32
`SessionId` Int32
`RefCount` UInt32

Event ID 122: [Instance] Device [DeviceId] Wait/Wake IRP is completed.

Channel: Trace
Opcode: Info

Message #

[%1] Device [%2] Wait/Wake IRP is completed.

Fields #

Name	Description
`Instance` UInt32
`DeviceId` GUID

Event ID 123: Device [DeviceId] initial radio state is HwRadioState HwRadioState, SwRadioState SwRadioState.

Channel: Trace
Opcode: Info

Message #

Device [%1] initial radio state is HwRadioState %2, SwRadioState %3

Fields #

Name	Description
`DeviceId` GUID
`HwRadioState` Boolean
`SwRadioState` Boolean

Provenance

ETW provider GUID 12d25187-6c0d-4783-ad3a-84caa135acfd

Defined in mbbcx.sys, the binary that emits these events.

Win11-26200.6584, schema read from the registered manifest, binary version 10.0.26100.6584, captured 2026-06-02 — Manifest XML pack, 2.0 MB