Microsoft-Windows-WMP-Setup_WM
| Event | Title | Channel | Sample | Rule |
|---|---|---|---|---|
| 801 | FUE_CONFIGURATIONStart | WMPSetup | N | N |
| 802 | FUE_CONFIGURATIONStop | WMPSetup | N | N |
| 803 | FUE_INTERNAL_CONFIGURATIONStart | WMPSetup | N | N |
| 804 | FUE_INTERNAL_CONFIGURATIONStop | WMPSetup | N | N |
| 805 | FUE_PATH_SELECTION | WMPSetup | N | N |
| 806 | FUE_PATH_TAKEN | WMPSetup | N | N |
Provenance
ETW provider GUID 0d759f0f-cff9-4902-8867-eb9e29d7a98b
Defined in Program, which carries the event manifest.
- WS2022-20348.4893, schema read from the registered manifest, binary version 12.0.20348.1, captured 2026-06-02 — Manifest XML pack, 1.9 MB
- Win11-26200.6584, schema read from the registered manifest, binary version 12.0.26100.1, captured 2026-06-02 — Manifest XML pack, 2.0 MB