Microsoft-Windows-WMP

Event	Title	Channel	Sample	Rule
1	LEGACY_EVENTMEDIA_OPEN	Operational	N	N
2	LEGACY_EVENTPLAYLIST_OPEN_NOMEDIA	Operational	Y	N
3	LEGACY_EVENTPLAYING	Operational	N	N
4	RIPStart	Operational	N	N
5	RIPStop	Operational	N	N
7	LEGACY_EVENTLOCAL_PLAY_BEGIN	Operational	N	N
8	LEGACY_EVENTSTREAMING_PLAY_BEGIN	Operational	N	N
9	PDA_TRANSFERStart	Operational	N	N
10	PDA_TRANSFERStop	Operational	N	N
11	LEGACY_EVENTADD_FILES_LIBRARY_END	Operational	N	N
12	SEARCHFORMEDIAStart	Operational	N	N
13	SEARCHFORMEDIAStop	Operational	N	N
14	LEGACY_EVENTDELETESELECTED_END	Operational	N	N
15	LEGACY_EVENTBEFORENAVIGATE2	Operational	N	N
16	LEGACY_EVENTDOCUMENTCOMPLETE	Operational	N	N
17	LEGACY_EVENTTRANSITIONING	Operational	N	N
18	LEGACY_EVENTMEDIA_ENDED	Operational	N	N
19	TASK_SWITCHStart	Operational	N	N
20	TASK_SWITCHStop	Operational	N	N
21	PDA_DISCOVERYStart	Operational	N	N
22	PDA_DISCOVERYStop	Operational	N	N
23	LEGACY_EVENTERROR_DIALOG	Operational	N	N
24	LEGACY_EVENTEXCEPTION_THROWN	Operational	N	N
25	LEGACY_EVENTAPP_IDLE	Operational	N	N
26	LEGACY_EVENTPLAYLIST_POPULATED	Operational	N	N
27	LEGACY_EVENTOCX_FIRST_PAINT	Operational	N	N
28	LEGACY_EVENTTREEVIEW_EXPANDED	Operational	N	N
29	LEGACY_EVENTFULLSCREEN	Operational	N	N
30	LEGACY_EVENTBULKEDITCOMPLETE	Operational	N	N
31	LEGACY_EVENTNODERENAMECOMPLETE	Operational	N	N
32	LEGACY_EVENTDROPCOMPLETE	Operational	N	N
33	LEGACY_EVENTCOLUMNSORTCOMPLETE	Operational	N	N
34	LEGACY_EVENTOCXSETCLIENTSITE	Operational	N	N
35	LEGACY_EVENTOCXACTIVATED	Operational	N	N
36	LEGACY_EVENTDEVICEINDIVSETCLOCK	Operational	N	N
37	PDA_TRANSCODEStart	Operational	N	N
38	PDA_TRANSCODEStop	Operational	N	N
39	PDA_TRANSFER_FILEStart	Operational	N	N
40	PDA_TRANSFER_FILEStop	Operational	N	N
41	PDA_NEWSYNCStart	Operational	N	N
42	PDA_NEWSYNCStop	Operational	N	N
43	APP_NAVIGATEStart	Operational	N	N
44	APP_NAVIGATEStop	Operational	N	N
45	LEGACY_EVENTSQM_UPLOAD_SIGNAL	Operational	N	N
46	PDA_DEVICE_ENUMERATIONStart	Operational	N	N
47	PDA_DEVICE_ENUMERATIONStop	Operational	N	N
48	LEGACY_EVENTPROC_START	Operational	Y	N
49	LEGACY_EVENTPROC_END	Operational	Y	N
50	LEGACY_EVENTDLL_START	Operational	Y	N
51	LEGACY_EVENTDLL_END	Operational	Y	N
52	LEGACY_EVENTHME_SERVICEADDED	Operational	N	N
53	HME_INITIALDISCOVERYStart	Operational	N	N
54	HME_INITIALDISCOVERYStop	Operational	N	N
55	HME_EXECUTEQUERYStart	Operational	N	N
56	HME_EXECUTEQUERYStop	Operational	N	N
57	HME_BROWSEStart	Operational	N	N
58	HME_BROWSEStop	Operational	N	N
59	LEGACY_EVENTPDA_DEVICE_DETECTED	Operational	N	N
60	APP_LAUNCHStart	Operational	N	N
61	APP_LAUNCHStop	Operational	N	N
62	PARSE_CMD_LINEStart	Operational	N	N
63	PARSE_CMD_LINEStop	Operational	N	N
64	PROCESS_CMD_LINEStart	Operational	N	N
65	PROCESS_CMD_LINEStop	Operational	N	N
66	APPLY_SKINStart	Operational	N	N
67	APPLY_SKINStop	Operational	N	N
68	RESTORE_FROM_SKINStart	Operational	N	N
69	RESTORE_FROM_SKINStop	Operational	N	N
70	FULLSCREENStart	Operational	N	N
71	FULLSCREENStop	Operational	N	N
72	TASKBARStart	Operational	N	N
73	TASKBARStop	Operational	N	N
74	MODE_SWITCHER	Operational	N	N
75	DSHOWGRAPH_OPEN	Operational	N	N
76	FSDKGRAPH_OPEN	Operational	N	N
77	MFGRAPH_OPEN	Operational	N	N
78	CDBURNStart	Operational	N	N
79	CDBURNStop	Operational	N	N
80	CDBURNCheckpoint_1	Operational	N	N
81	CDBURNCheckpoint_2	Operational	N	N
82	PLAYBACKStateChange	Operational	N	N
83	FULLSCREENCLOSEBUTTON_CLICK	Operational	N	N
84	DDPRESET_NORMAL	Operational	N	N
85	DDPRESET_LAPTOP	Operational	N	N
86	DDPRESET_THEATER	Operational	N	N
87	DISCMEDIACHANGEAdded	Operational	N	N
88	DISCMEDIACHANGERemoved	Operational	N	N
89	DISCMEDIACHANGE	Operational	N	N
90	FULLSCREENEXITBUTTON_CLICK	Operational	N	N
91	MAINFRAME_DESTROYStart	Operational	N	N
92	MAINFRAME_DESTROYStop	Operational	N	N
93	FULLSCREEN_LOADINGUIStart	Operational	N	N
94	FULLSCREEN_LOADINGUIStop	Operational	N	N
95	FULLSCREEN_LOADINGUI_FADEStart	Operational	N	N
96	FULLSCREEN_LOADINGUI_FADEStop	Operational	N	N
97	DVDGRAPH	Operational	N	N
99	GROVELER	Operational	N	N
100	GROVELER100	Operational	N	N
101	GROVELER101	Operational	N	N
102	GROVELER102	Operational	N	N
103	GROVELER103	Operational	N	N
104	GROVELER104	Operational	N	N
105	GROVELERStart	Operational	N	N
106	GROVELERStop	Operational	N	N
107	GROVELER107	Operational	N	N
108	GROVELER108	Operational	N	N
109	GROVELER109	Operational	N	N
110	GROVELER110	Operational	N	N
149	METADATAPLUGIN	Operational	N	N
150	METADATAPLUGIN150	Operational	N	N
151	METADATAPLUGIN151	Operational	N	N
152	METADATAPLUGIN152	Operational	Y	N
153	METADATAPLUGIN153	Operational	N	N
154	METADATAPLUGIN154	Operational	N	N
155	RAMCACHE	Operational	Y	N
156	RAMCACHE156	Operational	N	N
157	RAMCACHEStart	Operational	Y	N
158	RAMCACHEStop	Operational	Y	N
200	METADATALIFECYCLE	Operational	N	N
201	METADATADOWNLOADStart	Operational	N	N
202	METADATADOWNLOADStop	Operational	N	N
205	MLS	Operational	N	N
206	MLS206	Operational	N	N
207	MLS207	Operational	Y	N
220	PLAYLISTStart	Operational	N	N
221	PLAYLISTStop	Operational	N	N
222	PLAYHISTORYCLICK	Operational	N	N
250	RADIO	Operational	N	N
251	RADIORemoved	Operational	N	N
252	RADIOAdded	Operational	N	N
280	THUMBNAIL_TOOLBAR_ADDStart	Operational	N	N
281	THUMBNAIL_TOOLBAR_ADDStop	Operational	N	N
282	THUMBNAIL_TOOLBAR_BUTTON_CLICKEDStart	Operational	N	N
283	THUMBNAIL_TOOLBAR_BUTTON_CLICKEDStop	Operational	N	N
284	THUMBNAIL_TOOLTIP_CHANGED	Operational	N	N
285	THUMBNAIL_BITMAPS_INVALIDATED	Operational	N	N
286	THUMBNAIL_BITMAP_UPDATEStart	Operational	N	N
287	THUMBNAIL_BITMAP_UPDATEStop	Operational	N	N
288	THUMBNAIL_LIVEPREVIEWBITMAP_UPDATEStart	Operational	N	N
289	THUMBNAIL_LIVEPREVIEWBITMAP_UPDATEStop	Operational	N	N
300	SKINEVENT	Operational	N	N
301	HOVERTRANSPORTSStart	Operational	N	N
302	HOVERTRANSPORTSStop	Operational	N	N
303	SKINPAINTStart	Operational	N	N
304	SKINPAINTStop	Operational	N	N
305	BASKETStart	Operational	N	N
306	BASKETStop	Operational	N	N
307	NAVIGATION	Operational	N	N
308	LISTVIEW	Operational	N	N
309	LISTVIEWStart	Operational	N	N
310	LISTVIEWStop	Operational	N	N
311	TREEVIEW	Operational	N	N
312	PLAYHISTORY	Operational	N	N
313	LIBRARYUX	Operational	N	N
314	LIBRARYUX314	Operational	N	N
315	USAGELOGGER	Operational	N	N
316	WORDWHEELStart	Operational	N	N
317	WORDWHEELStop	Operational	N	N
318	WORDWHEELStop318	Operational	N	N
323	HME_SERVER_CONTAINER_UPDATE_IDSStart	Operational	N	N
324	HME_SERVER_CONTAINER_UPDATE_IDSStop	Operational	N	N
356	HME_SERVER_EXECUTE_QUERYStart	Operational	N	N
357	HME_SERVER_EXECUTE_QUERYStop	Operational	N	N
360	HME_SERVER_UPDATEOBJECTStart	Operational	N	N
361	HME_SERVER_UPDATEOBJECTStop	Operational	N	N
362	HME_CLIENT_UPDATE_METADATAStart	Operational	N	N
363	HME_CLIENT_UPDATE_METADATAStop	Operational	N	N
364	HME_SERVER_ONLINE_OFFLINE	Operational	N	N
365	HME_SERVER_MAGIC_PACKET_SENT	Operational	N	N
366	HME_SERVER_WAKEUP_FAILED	Operational	N	N
370	HME_EnableSharingStart	Operational	N	N
371	HME_EnableSharingStop	Operational	N	N
372	HME_UPnPDiscoveryBeginStart	Operational	N	N
373	HME_UPnPDiscoveryBeginStop	Operational	N	N
374	HME_UPnPDiscoveryInitialComplete	Operational	N	N
375	HME_UPnPDiscoveryEnd	Operational	N	N
376	HME_UPnPDeviceAddedCallbackStart	Operational	N	N
377	HME_UPnPDeviceAddedCallback	Operational	N	N
378	HME_UPnPDeviceAddedCallback378	Operational	N	N
379	HME_UPnPDeviceAddedCallbackStop	Operational	N	N
380	HME_UPnPDeviceRemovedCallbackStart	Operational	N	N
381	HME_UPnPDeviceRemovedCallback	Operational	N	N
382	HME_UPnPDeviceRemovedCallbackStop	Operational	N	N
383	HME_InitCDSThreadStart	Operational	N	N
384	HME_InitCDSThreadStop	Operational	N	N
385	HME_InitCDSStart	Operational	N	N
386	HME_InitCDSStop	Operational	N	N
389	HME_ServiceAddedStart	Operational	N	N
390	HME_ServiceAdded	Operational	N	N
391	HME_ServiceAddedStop	Operational	N	N
392	HME_CDSUPnPInitializeStart	Operational	N	N
393	HME_CDSUPnPInitializeStop	Operational	N	N
394	HME_ProviderAddToRAMCacheStart	Operational	N	N
395	HME_ProviderAddToRAMCacheStop	Operational	N	N
396	HME_ProviderShutdownStart	Operational	N	N
397	HME_ProviderShutdownStop	Operational	N	N
398	HME_ProviderUpdateMessage	Operational	N	N
400	Transcode has started.	WMPSyncEngine	N	N
401	Transcode has rolled over to using the dshow source.	WMPSyncEngine	N	N
402	Transcode has rolled over to the WMEncode API.	WMPSyncEngine	N	N
403	Transcode has completed.	WMPSyncEngine	N	N
404	Transcode matrix is using MP4 matrix	WMPSyncEngine	N	N
405	Transcode matrix is using ASF matrix	WMPSyncEngine	N	N
406	IsTranscodeNeeded for source file SourceFile (DRM flag: IsDRM) has started.	WMPSyncEngine	N	N
407	IsTranscodeNeeded for source file SourceFile has stopped.	WMPSyncEngine	N	N
408	GetTranscodeProfile for source file SourceFile has started.	WMPSyncEngine	N	N
409	GetTranscodeProfile for source file SourceFile has stopped.	WMPSyncEngine	N	N
410	Sync engine is attempting to acquire a license for file SourceFile.	WMPSyncEngine	N	N
411	Sync engine has finished attempt to acquire license for file SourceFile.	WMPSyncEngine	N	N
412	PLAYTOMENU_ENUMERATIONStart	Operational	N	N
413	PLAYTOMENU_ENUMERATIONStop	Operational	N	N
414	PLAYTOMENU_OPERATIONStart	Operational	N	N
415	PLAYTOMENU_OPERATION	Operational	N	N
416	PLAYTOMENU_OPERATIONStop	Operational	N	N
417	WMPDMR_AVTRANSPORT_ACTIONSStart	Operational	N	N
418	WMPDMR_AVTRANSPORT_ACTIONSStop	Operational	N	N
419	WMPDMR_AVTRANSPORT_ACTIONSStart419	Operational	N	N
420	WMPDMR_AVTRANSPORT_ACTIONSStop420	Operational	N	N
425	STREAMING_MENU_ACTIONSStart	Operational	N	N
426	STREAMING_MENU_ACTIONSStop	Operational	N	N
427	CONFIGURE_STREAMING_MENU_ACTIONStart	Operational	N	N
428	CONFIGURE_STREAMING_MENU_ACTIONStop	Operational	N	N
429	RECEIVE_MEDIA_MENU_ACTIONStart	Operational	N	N
430	RECEIVE_MEDIA_MENU_ACTIONStop	Operational	N	N
433	STREAMING_MENU_RENDER_ACTIONStart	Operational	N	N
434	STREAMING_MENU_RENDER_ACTIONStop	Operational	N	N
436	STREAMING_MENUITEM_RECEIVEMEDIA_CHECKSTATE	Operational	N	N
437	STREAMING_MENUITEM_AUTOALLOWDEVICES_CHECKSTATE	Operational	N	N
438	ALLOW_ALL_DEVICES_MENU_ACTIONStart	Operational	N	N
439	ALLOW_ALL_DEVICES_MENU_ACTIONStop	Operational	N	N
440	CONFIGURE_STREAMING_HG_MENU_ACTIONStart	Operational	N	N
441	CONFIGURE_STREAMING_HG_MENU_ACTIONStop	Operational	N	N
450	PLAYSINGLE_PH_RESOLVEStart	Operational	N	N
451	PLAYSINGLE_PH_RESOLVE	Operational	N	N
452	PLAYSINGLE_PH_RESOLVEStop	Operational	N	N
453	PLAYSINGLE_PH_BROWSECDSStart	Operational	N	N
454	PLAYSINGLE_PH_BROWSECDS	Operational	N	N
455	PLAYSINGLE_PH_BROWSECDSStop	Operational	N	N
456	PLAYCONTAINER_CREATE_PLAYLISTStart	Operational	N	N
457	PLAYCONTAINER_CREATE_PLAYLISTStop	Operational	N	N
460	WMPDMR_AVTRANSPORT_ACTIONSStart460	Operational	N	N
461	WMPDMR_AVTRANSPORT_ACTIONSStop461	Operational	N	N
462	WMPDMR_AVTRANSPORT_ACTIONSStart462	Operational	N	N
463	WMPDMR_AVTRANSPORT_ACTIONSStop463	Operational	N	N
464	WMPDMR_AVTRANSPORT_ACTIONSStart464	Operational	N	N
465	WMPDMR_AVTRANSPORT_ACTIONSStop465	Operational	N	N
466	WMPDMR_AVTRANSPORT_ACTIONSStart466	Operational	N	N
467	WMPDMR_AVTRANSPORT_ACTIONSStop467	Operational	N	N
468	WMPDMR_AVTRANSPORT_ACTIONSStart468	Operational	N	N
469	WMPDMR_AVTRANSPORT_ACTIONSStop469	Operational	N	N
470	WMPDMR_AVTRANSPORT_ACTIONSStart470	Operational	N	N
471	WMPDMR_AVTRANSPORT_ACTIONSStop471	Operational	N	N
472	WMPDMR_AVTRANSPORT_ACTIONSStart472	Operational	N	N
473	WMPDMR_AVTRANSPORT_ACTIONSStop473	Operational	N	N
474	WMPDMR_CONNECTION_MANAGER_ACTIONSStart	Operational	N	N
475	WMPDMR_CONNECTION_MANAGER_ACTIONSStop	Operational	N	N
476	WMPDMR_RENDERING_CONTROL_ACTIONSStart	Operational	N	N
477	WMPDMR_RENDERING_CONTROL_ACTIONSStop	Operational	N	N
478	WMPDMR_RENDERING_CONTROL_ACTIONSStart478	Operational	N	N
479	WMPDMR_RENDERING_CONTROL_ACTIONSStop479	Operational	N	N
480	WMPDMR_RENDERING_CONTROL_ACTIONSStart480	Operational	N	N
481	WMPDMR_RENDERING_CONTROL_ACTIONSStop481	Operational	N	N
482	WMPDMR_RENDERING_CONTROL_ACTIONSStart482	Operational	N	N
483	WMPDMR_RENDERING_CONTROL_ACTIONSStop483	Operational	N	N
490	CDDVD_LAUNCHStart	Operational	N	N
491	CDDVD_LAUNCHLOCAL_PLAY_BEGIN	Operational	N	N
492	CDDVD_LAUNCHLOCAL_PLAY_BEGIN492	Operational	N	N
493	CDDVD_LAUNCHStop	Operational	N	N
501	Transcode matrix is using MP3 matrix	WMPSyncEngine	N	N
1305	SKINCLOSEStart	Operational	N	N
1306	SKINCLOSEStop	Operational	N	N
1307	APPCLOSEStart	Operational	N	N
1308	APPCLOSEStop	Operational	N	N
1309	SKINPAINTStart1309	Operational	N	N
1310	SKINPAINTStop1310	Operational	N	N
1311	SKINPAINTStart1311	Operational	N	N
1312	SKINPAINTStop1312	Operational	N	N
1313	SKINPAINTStart1313	Operational	N	N
1314	SKINPAINTStop1314	Operational	N	N
1615	CDGRAPH	Operational	N	N

Event ID 1: LEGACY_EVENTMEDIA_OPEN

Channel: Operational
Task: LEGACY_EVENT
Opcode: MEDIA_OPEN

Event ID 2: LEGACY_EVENTPLAYLIST_OPEN_NOMEDIA

Channel: Operational
Level: Informational
Task: LEGACY_EVENT
Opcode: PLAYLIST_OPEN_NOMEDIA

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-WMP",
    "guid": "{f3f14ff3-7b80-4868-91d0-d77e497b025e}",
    "event_source_name": "",
    "event_id": 2,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 14,
    "keywords": "0x10000",
    "time_created": "2026-07-19T04:14:50.058616300+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 1908,
      "thread_id": 9656
    },
    "channel": "Microsoft-Windows-WMP/Operational",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 3: LEGACY_EVENTPLAYING

Channel: Operational
Task: LEGACY_EVENT
Opcode: PLAYING

Event ID 4: RIPStart

Channel: Operational
Task: RIP
Opcode: Start

Event ID 5: RIPStop

Channel: Operational
Task: RIP
Opcode: Stop

Event ID 7: LEGACY_EVENTLOCAL_PLAY_BEGIN

Channel: Operational
Task: LEGACY_EVENT
Opcode: LOCAL_PLAY_BEGIN

Event ID 8: LEGACY_EVENTSTREAMING_PLAY_BEGIN

Channel: Operational
Task: LEGACY_EVENT
Opcode: STREAMING_PLAY_BEGIN

Event ID 9: PDA_TRANSFERStart

Channel: Operational
Task: PDA_TRANSFER
Opcode: Start

Event ID 10: PDA_TRANSFERStop

Channel: Operational
Task: PDA_TRANSFER
Opcode: Stop

Event ID 11: LEGACY_EVENTADD_FILES_LIBRARY_END

Channel: Operational
Task: LEGACY_EVENT
Opcode: ADD_FILES_LIBRARY_END

Event ID 12: SEARCHFORMEDIAStart

Channel: Operational
Task: SEARCHFORMEDIA
Opcode: Start

Event ID 13: SEARCHFORMEDIAStop

Channel: Operational
Task: SEARCHFORMEDIA
Opcode: Stop

Event ID 14: LEGACY_EVENTDELETESELECTED_END

Channel: Operational
Task: LEGACY_EVENT
Opcode: DELETESELECTED_END

Event ID 15: LEGACY_EVENTBEFORENAVIGATE2

Channel: Operational
Task: LEGACY_EVENT
Opcode: BEFORENAVIGATE2

Event ID 16: LEGACY_EVENTDOCUMENTCOMPLETE

Channel: Operational
Task: LEGACY_EVENT
Opcode: DOCUMENTCOMPLETE

Event ID 17: LEGACY_EVENTTRANSITIONING

Channel: Operational
Task: LEGACY_EVENT
Opcode: TRANSITIONING

Event ID 18: LEGACY_EVENTMEDIA_ENDED

Channel: Operational
Task: LEGACY_EVENT
Opcode: MEDIA_ENDED

Event ID 19: TASK_SWITCHStart

Channel: Operational
Task: TASK_SWITCH
Opcode: Start

Event ID 20: TASK_SWITCHStop

Channel: Operational
Task: TASK_SWITCH
Opcode: Stop

Event ID 21: PDA_DISCOVERYStart

Channel: Operational
Task: PDA_DISCOVERY
Opcode: Start

Event ID 22: PDA_DISCOVERYStop

Channel: Operational
Task: PDA_DISCOVERY
Opcode: Stop

Event ID 23: LEGACY_EVENTERROR_DIALOG

Channel: Operational
Task: LEGACY_EVENT
Opcode: ERROR_DIALOG

Event ID 24: LEGACY_EVENTEXCEPTION_THROWN

Channel: Operational
Task: LEGACY_EVENT
Opcode: EXCEPTION_THROWN

Event ID 25: LEGACY_EVENTAPP_IDLE

Channel: Operational
Task: LEGACY_EVENT
Opcode: APP_IDLE

Event ID 26: LEGACY_EVENTPLAYLIST_POPULATED

Channel: Operational
Task: LEGACY_EVENT
Opcode: PLAYLIST_POPULATED

Event ID 27: LEGACY_EVENTOCX_FIRST_PAINT

Channel: Operational
Task: LEGACY_EVENT
Opcode: OCX_FIRST_PAINT

Event ID 28: LEGACY_EVENTTREEVIEW_EXPANDED

Channel: Operational
Task: LEGACY_EVENT
Opcode: TREEVIEW_EXPANDED

Event ID 29: LEGACY_EVENTFULLSCREEN

Channel: Operational
Task: LEGACY_EVENT
Opcode: FULLSCREEN

Event ID 30: LEGACY_EVENTBULKEDITCOMPLETE

Channel: Operational
Task: LEGACY_EVENT
Opcode: BULKEDITCOMPLETE

Event ID 31: LEGACY_EVENTNODERENAMECOMPLETE

Channel: Operational
Task: LEGACY_EVENT
Opcode: NODERENAMECOMPLETE

Event ID 32: LEGACY_EVENTDROPCOMPLETE

Channel: Operational
Task: LEGACY_EVENT
Opcode: DROPCOMPLETE

Event ID 33: LEGACY_EVENTCOLUMNSORTCOMPLETE

Channel: Operational
Task: LEGACY_EVENT
Opcode: COLUMNSORTCOMPLETE

Event ID 34: LEGACY_EVENTOCXSETCLIENTSITE

Channel: Operational
Task: LEGACY_EVENT
Opcode: OCXSETCLIENTSITE

Event ID 35: LEGACY_EVENTOCXACTIVATED

Channel: Operational
Task: LEGACY_EVENT
Opcode: OCXACTIVATED

Event ID 36: LEGACY_EVENTDEVICEINDIVSETCLOCK

Channel: Operational
Task: LEGACY_EVENT
Opcode: DEVICEINDIVSETCLOCK

Event ID 37: PDA_TRANSCODEStart

Channel: Operational
Task: PDA_TRANSCODE
Opcode: Start

Event ID 38: PDA_TRANSCODEStop

Channel: Operational
Task: PDA_TRANSCODE
Opcode: Stop

Event ID 39: PDA_TRANSFER_FILEStart

Channel: Operational
Task: PDA_TRANSFER_FILE
Opcode: Start

Event ID 40: PDA_TRANSFER_FILEStop

Channel: Operational
Task: PDA_TRANSFER_FILE
Opcode: Stop

Event ID 41: PDA_NEWSYNCStart

Channel: Operational
Task: PDA_NEWSYNC
Opcode: Start

Event ID 42: PDA_NEWSYNCStop

Channel: Operational
Task: PDA_NEWSYNC
Opcode: Stop

Event ID 43: APP_NAVIGATEStart

Channel: Operational
Task: APP_NAVIGATE
Opcode: Start

Event ID 44: APP_NAVIGATEStop

Channel: Operational
Task: APP_NAVIGATE
Opcode: Stop

Event ID 45: LEGACY_EVENTSQM_UPLOAD_SIGNAL

Channel: Operational
Task: LEGACY_EVENT
Opcode: SQM_UPLOAD_SIGNAL

Event ID 46: PDA_DEVICE_ENUMERATIONStart

Channel: Operational
Task: PDA_DEVICE_ENUMERATION
Opcode: Start

Event ID 47: PDA_DEVICE_ENUMERATIONStop

Channel: Operational
Task: PDA_DEVICE_ENUMERATION
Opcode: Stop

Event ID 48: LEGACY_EVENTPROC_START

Channel: Operational
Level: Informational
Task: LEGACY_EVENT
Opcode: PROC_START

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-WMP",
    "guid": "{f3f14ff3-7b80-4868-91d0-d77e497b025e}",
    "event_source_name": "",
    "event_id": 48,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 37,
    "keywords": "0x10000",
    "time_created": "2026-07-19T04:14:48.816566900+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 9360,
      "thread_id": 12728
    },
    "channel": "Microsoft-Windows-WMP/Operational",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 49: LEGACY_EVENTPROC_END

Channel: Operational
Level: Informational
Task: LEGACY_EVENT
Opcode: PROC_END

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-WMP",
    "guid": "{f3f14ff3-7b80-4868-91d0-d77e497b025e}",
    "event_source_name": "",
    "event_id": 49,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 38,
    "keywords": "0x10000",
    "time_created": "2026-07-19T04:14:49.244165500+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 9360,
      "thread_id": 12728
    },
    "channel": "Microsoft-Windows-WMP/Operational",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 50: LEGACY_EVENTDLL_START

Channel: Operational
Level: Informational
Task: LEGACY_EVENT
Opcode: DLL_START

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-WMP",
    "guid": "{f3f14ff3-7b80-4868-91d0-d77e497b025e}",
    "event_source_name": "",
    "event_id": 50,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 39,
    "keywords": "0x10000",
    "time_created": "2026-07-19T04:14:49.867144700+00:00",
    "event_record_id": 0,
    "correlation": {
      "ActivityID": "BF440000-0BF1-0001-AA04-54BFF10BDD01"
    },
    "execution": {
      "process_id": 1908,
      "thread_id": 9656
    },
    "channel": "Microsoft-Windows-WMP/Operational",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 51: LEGACY_EVENTDLL_END

Channel: Operational
Level: Informational
Task: LEGACY_EVENT
Opcode: DLL_END

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-WMP",
    "guid": "{f3f14ff3-7b80-4868-91d0-d77e497b025e}",
    "event_source_name": "",
    "event_id": 51,
    "version": 0,
    "level": 4,
    "task": 1,
    "opcode": 40,
    "keywords": "0x10000",
    "time_created": "2026-07-19T04:14:50.506748800+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 1908,
      "thread_id": 9656
    },
    "channel": "Microsoft-Windows-WMP/Operational",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {},
  "message": ""
}

Event ID 52: LEGACY_EVENTHME_SERVICEADDED

Channel: Operational
Task: LEGACY_EVENT
Opcode: HME_SERVICEADDED

Event ID 53: HME_INITIALDISCOVERYStart

Channel: Operational
Task: HME_INITIALDISCOVERY
Opcode: Start

Event ID 54: HME_INITIALDISCOVERYStop

Channel: Operational
Task: HME_INITIALDISCOVERY
Opcode: Stop

Event ID 55: HME_EXECUTEQUERYStart

Channel: Operational
Task: HME_EXECUTEQUERY
Opcode: Start

Event ID 56: HME_EXECUTEQUERYStop

Channel: Operational
Task: HME_EXECUTEQUERY
Opcode: Stop

Event ID 57: HME_BROWSEStart

Channel: Operational
Task: HME_BROWSE
Opcode: Start

Event ID 58: HME_BROWSEStop

Channel: Operational
Task: HME_BROWSE
Opcode: Stop

Event ID 59: LEGACY_EVENTPDA_DEVICE_DETECTED

Channel: Operational
Task: LEGACY_EVENT
Opcode: PDA_DEVICE_DETECTED

Event ID 60: APP_LAUNCHStart

Channel: Operational
Task: APP_LAUNCH
Opcode: Start

Event ID 61: APP_LAUNCHStop

Channel: Operational
Task: APP_LAUNCH
Opcode: Stop

Event ID 62: PARSE_CMD_LINEStart

Channel: Operational
Task: PARSE_CMD_LINE
Opcode: Start

Fields #

Name	Description
`CmdLine` UnicodeString

Event ID 63: PARSE_CMD_LINEStop

Channel: Operational
Task: PARSE_CMD_LINE
Opcode: Stop

Fields #

Name	Description
`CmdLine` UnicodeString

Event ID 64: PROCESS_CMD_LINEStart

Channel: Operational
Task: PROCESS_CMD_LINE
Opcode: Start

Event ID 65: PROCESS_CMD_LINEStop

Channel: Operational
Task: PROCESS_CMD_LINE
Opcode: Stop

Event ID 66: APPLY_SKINStart

Channel: Operational
Task: APPLY_SKIN
Opcode: Start

Fields #

Name	Description
`SkinPath` UnicodeString

Event ID 67: APPLY_SKINStop

Channel: Operational
Task: APPLY_SKIN
Opcode: Stop

Fields #

Name	Description
`SkinPath` UnicodeString

Event ID 68: RESTORE_FROM_SKINStart

Channel: Operational
Task: RESTORE_FROM_SKIN
Opcode: Start

Event ID 69: RESTORE_FROM_SKINStop

Channel: Operational
Task: RESTORE_FROM_SKIN
Opcode: Stop

Event ID 70: FULLSCREENStart

Channel: Operational
Task: FULLSCREEN
Opcode: Start

Event ID 71: FULLSCREENStop

Channel: Operational
Task: FULLSCREEN
Opcode: Stop

Event ID 72: TASKBARStart

Channel: Operational
Task: TASKBAR
Opcode: Start

Event ID 73: TASKBARStop

Channel: Operational
Task: TASKBAR
Opcode: Stop

Event ID 74: MODE_SWITCHER

Channel: Operational
Task: MODE_SWITCHER

Fields #

Name	Description
`ModeSwitcherOption` UInt32

Event ID 75: DSHOWGRAPH_OPEN

Channel: Operational
Task: DSHOWGRAPH_OPEN

Event ID 76: FSDKGRAPH_OPEN

Channel: Operational
Task: FSDKGRAPH_OPEN

Event ID 77: MFGRAPH_OPEN

Channel: Operational
Task: MFGRAPH_OPEN

Event ID 78: CDBURNStart

Channel: Operational
Task: CDBURN
Opcode: Start

Event ID 79: CDBURNStop

Channel: Operational
Task: CDBURN
Opcode: Stop

Event ID 80: CDBURNCheckpoint_1

Channel: Operational
Task: CDBURN
Opcode: Checkpoint_1

Event ID 81: CDBURNCheckpoint_2

Channel: Operational
Task: CDBURN
Opcode: Checkpoint_2

Event ID 82: PLAYBACKStateChange

Channel: Operational
Task: PLAYBACK
Opcode: StateChange

Fields #

Name	Description
`EventType` UnicodeString
`NewState` UInt32

Event ID 83: FULLSCREENCLOSEBUTTON_CLICK

Channel: Operational
Task: FULLSCREEN
Opcode: CLOSEBUTTON_CLICK

Event ID 84: DDPRESET_NORMAL

Channel: Operational
Task: DDPRESET_NORMAL

Fields #

Name	Description
`HRESULT` UInt32

Event ID 85: DDPRESET_LAPTOP

Channel: Operational
Task: DDPRESET_LAPTOP

Fields #

Name	Description
`HRESULT` UInt32

Event ID 86: DDPRESET_THEATER

Channel: Operational
Task: DDPRESET_THEATER

Fields #

Name	Description
`HRESULT` UInt32

Event ID 87: DISCMEDIACHANGEAdded

Channel: Operational
Task: DISCMEDIACHANGE
Opcode: Added

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 88: DISCMEDIACHANGERemoved

Channel: Operational
Task: DISCMEDIACHANGE
Opcode: Removed

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 89: DISCMEDIACHANGE

Channel: Operational
Task: DISCMEDIACHANGE

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 90: FULLSCREENEXITBUTTON_CLICK

Channel: Operational
Task: FULLSCREEN
Opcode: EXITBUTTON_CLICK

Event ID 91: MAINFRAME_DESTROYStart

Channel: Operational
Task: MAINFRAME_DESTROY
Opcode: Start

Event ID 92: MAINFRAME_DESTROYStop

Channel: Operational
Task: MAINFRAME_DESTROY
Opcode: Stop

Event ID 93: FULLSCREEN_LOADINGUIStart

Channel: Operational
Task: FULLSCREEN_LOADINGUI
Opcode: Start

Event ID 94: FULLSCREEN_LOADINGUIStop

Channel: Operational
Task: FULLSCREEN_LOADINGUI
Opcode: Stop

Event ID 95: FULLSCREEN_LOADINGUI_FADEStart

Channel: Operational
Task: FULLSCREEN_LOADINGUI_FADE
Opcode: Start

Event ID 96: FULLSCREEN_LOADINGUI_FADEStop

Channel: Operational
Task: FULLSCREEN_LOADINGUI_FADE
Opcode: Stop

Event ID 97: DVDGRAPH

Channel: Operational
Task: DVDGRAPH

Fields #

Name	Description
`DeviceName` UnicodeString
`PnPID` UnicodeString

Event ID 99: GROVELER

Channel: Operational
Task: GROVELER

Fields #

Name	Description
`FilesFound` UInt32
`FilesAdded` UInt32
`FilesSkipped` UInt32
`DirectoriesFound` UInt32
`DirectoriesRemoved` UInt32
`Levels` UInt32
`ElapsedTime` UInt32

Event ID 100: GROVELER100

Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 101: GROVELER101

Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 102: GROVELER102

Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 103: GROVELER103

Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 104: GROVELER104

Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 105: GROVELERStart

Channel: Operational
Task: GROVELER
Opcode: Start

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 106: GROVELERStop

Channel: Operational
Task: GROVELER
Opcode: Stop

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 107: GROVELER107

Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 108: GROVELER108

Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 109: GROVELER109

Channel: Operational
Task: GROVELER

Event ID 110: GROVELER110

Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`HRESULT` UInt32

Event ID 149: METADATAPLUGIN

Channel: Operational
Task: METADATAPLUGIN

Fields #

Name	Description
`Name` UnicodeString
`HRESULT` UInt32

Event ID 150: METADATAPLUGIN150

Channel: Operational
Task: METADATAPLUGIN

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 151: METADATAPLUGIN151

Channel: Operational
Task: METADATAPLUGIN

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString
`Index` UInt32

Event ID 152: METADATAPLUGIN152

Channel: Operational
Level: Informational
Task: METADATAPLUGIN

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString
`Index` UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-WMP",
    "guid": "{f3f14ff3-7b80-4868-91d0-d77e497b025e}",
    "event_source_name": "",
    "event_id": 152,
    "version": 0,
    "level": 4,
    "task": 2001,
    "opcode": 0,
    "keywords": "0x20000",
    "time_created": "2026-07-19T04:14:50.308796000+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 1908,
      "thread_id": 9656
    },
    "channel": "Microsoft-Windows-WMP/Operational",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Name": "System.SharingStatus",
    "Value": "Not shared",
    "Index": "0"
  },
  "message": ""
}

Event ID 153: METADATAPLUGIN153

Channel: Operational
Task: METADATAPLUGIN

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 154: METADATAPLUGIN154

Channel: Operational
Task: METADATAPLUGIN

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 155: RAMCACHE

Channel: Operational
Level: Informational
Task: RAMCACHE

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString
`Index` UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-WMP",
    "guid": "{f3f14ff3-7b80-4868-91d0-d77e497b025e}",
    "event_source_name": "",
    "event_id": 155,
    "version": 0,
    "level": 4,
    "task": 2002,
    "opcode": 0,
    "keywords": "0x40000",
    "time_created": "2026-07-19T04:14:50.311688900+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 1908,
      "thread_id": 9884
    },
    "channel": "Microsoft-Windows-WMP/Operational",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Name": "AcquisitionTime",
    "Value": "7/19/2026 4:14:50 AM",
    "Index": "0"
  },
  "message": ""
}

Event ID 156: RAMCACHE156

Channel: Operational
Task: RAMCACHE

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString
`Index` UInt32

Event ID 157: RAMCACHEStart

Channel: Operational
Level: Informational
Task: RAMCACHE
Opcode: Start

Fields #

Name	Description
`Value` UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-WMP",
    "guid": "{f3f14ff3-7b80-4868-91d0-d77e497b025e}",
    "event_source_name": "",
    "event_id": 157,
    "version": 0,
    "level": 4,
    "task": 2002,
    "opcode": 1,
    "keywords": "0x40000",
    "time_created": "2026-07-19T04:14:50.311354700+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 1908,
      "thread_id": 9884
    },
    "channel": "Microsoft-Windows-WMP/Operational",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Value": "3"
  },
  "message": ""
}

Event ID 158: RAMCACHEStop

Channel: Operational
Level: Informational
Task: RAMCACHE
Opcode: Stop

Fields #

Name	Description
`Value` UInt32

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-WMP",
    "guid": "{f3f14ff3-7b80-4868-91d0-d77e497b025e}",
    "event_source_name": "",
    "event_id": 158,
    "version": 0,
    "level": 4,
    "task": 2002,
    "opcode": 2,
    "keywords": "0x40000",
    "time_created": "2026-07-19T04:14:50.313301300+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 1908,
      "thread_id": 9884
    },
    "channel": "Microsoft-Windows-WMP/Operational",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "Value": "3"
  },
  "message": ""
}

Event ID 200: METADATALIFECYCLE

Channel: Operational
Task: METADATALIFECYCLE

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 201: METADATADOWNLOADStart

Channel: Operational
Task: METADATADOWNLOAD
Opcode: Start

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 202: METADATADOWNLOADStop

Channel: Operational
Task: METADATADOWNLOAD
Opcode: Stop

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 205: MLS

Channel: Operational
Task: MLS

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 206: MLS206

Channel: Operational
Task: MLS

Fields #

Name	Description
`Name` UnicodeString
`HRESULT` UInt32

Event ID 207: MLS207

Channel: Operational
Level: Informational
Task: MLS

Fields #

Name	Description
`SourceFile` UnicodeString

Example Event #

{
  "system": {
    "provider": "Microsoft-Windows-WMP",
    "guid": "{f3f14ff3-7b80-4868-91d0-d77e497b025e}",
    "event_source_name": "",
    "event_id": 207,
    "version": 0,
    "level": 4,
    "task": 2005,
    "opcode": 0,
    "keywords": "0x100000",
    "time_created": "2026-07-19T04:14:50.255062100+00:00",
    "event_record_id": 0,
    "correlation": {},
    "execution": {
      "process_id": 1908,
      "thread_id": 9656
    },
    "channel": "Microsoft-Windows-WMP/Operational",
    "computer": "",
    "security": {
      "user_id": ""
    }
  },
  "event_data": {
    "SourceFile": "C:\\Users\\REDACTED-user\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\0077F9ED\\01_Music_auto_rated_at_5_stars.wpl"
  },
  "message": ""
}

Event ID 220: PLAYLISTStart

Channel: Operational
Task: PLAYLIST
Opcode: Start

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 221: PLAYLISTStop

Channel: Operational
Task: PLAYLIST
Opcode: Stop

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 222: PLAYHISTORYCLICK

Channel: Operational
Task: PLAYHISTORYCLICK

Event ID 250: RADIO

Channel: Operational
Task: RADIO

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 251: RADIORemoved

Channel: Operational
Task: RADIO
Opcode: Removed

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 252: RADIOAdded

Channel: Operational
Task: RADIO
Opcode: Added

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 280: THUMBNAIL_TOOLBAR_ADDStart

Channel: Operational
Task: THUMBNAIL_TOOLBAR_ADD
Opcode: Start

Fields #

Name	Description
`ToolbarID` UInt32

Event ID 281: THUMBNAIL_TOOLBAR_ADDStop

Channel: Operational
Task: THUMBNAIL_TOOLBAR_ADD
Opcode: Stop

Fields #

Name	Description
`ToolbarID` UInt32

Event ID 282: THUMBNAIL_TOOLBAR_BUTTON_CLICKEDStart

Channel: Operational
Task: THUMBNAIL_TOOLBAR_BUTTON_CLICKED
Opcode: Start

Fields #

Name	Description
`ButtonID` UInt32

Event ID 283: THUMBNAIL_TOOLBAR_BUTTON_CLICKEDStop

Channel: Operational
Task: THUMBNAIL_TOOLBAR_BUTTON_CLICKED
Opcode: Stop

Fields #

Name	Description
`ButtonID` UInt32

Event ID 284: THUMBNAIL_TOOLTIP_CHANGED

Channel: Operational
Task: THUMBNAIL_TOOLTIP_CHANGED

Fields #

Name	Description
`Tooltip` UnicodeString

Event ID 285: THUMBNAIL_BITMAPS_INVALIDATED

Channel: Operational
Task: THUMBNAIL_BITMAPS_INVALIDATED

Event ID 286: THUMBNAIL_BITMAP_UPDATEStart

Channel: Operational
Task: THUMBNAIL_BITMAP_UPDATE
Opcode: Start

Event ID 287: THUMBNAIL_BITMAP_UPDATEStop

Channel: Operational
Task: THUMBNAIL_BITMAP_UPDATE
Opcode: Stop

Event ID 288: THUMBNAIL_LIVEPREVIEWBITMAP_UPDATEStart

Channel: Operational
Task: THUMBNAIL_LIVEPREVIEWBITMAP_UPDATE
Opcode: Start

Event ID 289: THUMBNAIL_LIVEPREVIEWBITMAP_UPDATEStop

Channel: Operational
Task: THUMBNAIL_LIVEPREVIEWBITMAP_UPDATE
Opcode: Stop

Event ID 300: SKINEVENT

Channel: Operational
Task: SKINEVENT

Fields #

Name	Description
`Category` UnicodeString
`Skinformation` UnicodeString

Event ID 301: HOVERTRANSPORTSStart

Channel: Operational
Task: HOVERTRANSPORTS
Opcode: Start

Event ID 302: HOVERTRANSPORTSStop

Channel: Operational
Task: HOVERTRANSPORTS
Opcode: Stop

Event ID 303: SKINPAINTStart

Channel: Operational
Task: SKINPAINT
Opcode: Start

Event ID 304: SKINPAINTStop

Channel: Operational
Task: SKINPAINT
Opcode: Stop

Event ID 305: BASKETStart

Channel: Operational
Task: BASKET
Opcode: Start

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UInt32

Event ID 306: BASKETStop

Channel: Operational
Task: BASKET
Opcode: Stop

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UInt32

Event ID 307: NAVIGATION

Channel: Operational
Task: NAVIGATION

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 308: LISTVIEW

Channel: Operational
Task: LISTVIEW

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 309: LISTVIEWStart

Channel: Operational
Task: LISTVIEW
Opcode: Start

Fields #

Name	Description
`Int1` UInt32
`Int2` UInt32

Event ID 310: LISTVIEWStop

Channel: Operational
Task: LISTVIEW
Opcode: Stop

Fields #

Name	Description
`Int1` UInt32
`Int2` UInt32

Event ID 311: TREEVIEW

Channel: Operational
Task: TREEVIEW

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 312: PLAYHISTORY

Channel: Operational
Task: PLAYHISTORY

Fields #

Name	Description
`Int1` UInt32
`Int2` UInt32

Event ID 313: LIBRARYUX

Channel: Operational
Task: LIBRARYUX

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UInt32
`Value3` UInt32

Event ID 314: LIBRARYUX314

Channel: Operational
Task: LIBRARYUX

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString
`Value3` UnicodeString

Event ID 315: USAGELOGGER

Channel: Operational
Task: USAGELOGGER

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString
`Value3` UnicodeString

Event ID 316: WORDWHEELStart

Channel: Operational
Task: WORDWHEEL
Opcode: Start

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 317: WORDWHEELStop

Channel: Operational
Task: WORDWHEEL
Opcode: Stop

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UInt32

Event ID 318: WORDWHEELStop318

Channel: Operational
Task: WORDWHEEL
Opcode: Stop

Event ID 323: HME_SERVER_CONTAINER_UPDATE_IDSStart

Channel: Operational
Task: HME_SERVER_CONTAINER_UPDATE_IDS
Opcode: Start

Event ID 324: HME_SERVER_CONTAINER_UPDATE_IDSStop

Channel: Operational
Task: HME_SERVER_CONTAINER_UPDATE_IDS
Opcode: Stop

Event ID 356: HME_SERVER_EXECUTE_QUERYStart

Channel: Operational
Task: HME_SERVER_EXECUTE_QUERY
Opcode: Start

Fields #

Name	Description
`ContainerID` UnicodeString
`Query` UnicodeString

Event ID 357: HME_SERVER_EXECUTE_QUERYStop

Channel: Operational
Task: HME_SERVER_EXECUTE_QUERY
Opcode: Stop

Fields #

Name	Description
`ContainerID` UnicodeString
`Query` UnicodeString
`HRESULT` UInt32

Event ID 360: HME_SERVER_UPDATEOBJECTStart

Channel: Operational
Task: HME_SERVER_UPDATEOBJECT
Opcode: Start

Fields #

Name	Description
`DeviceID` UnicodeString
`ObjectID` UnicodeString

Event ID 361: HME_SERVER_UPDATEOBJECTStop

Channel: Operational
Task: HME_SERVER_UPDATEOBJECT
Opcode: Stop

Fields #

Name	Description
`DeviceID` UnicodeString
`ObjectID` UnicodeString
`HRESULT` UInt32

Event ID 362: HME_CLIENT_UPDATE_METADATAStart

Channel: Operational
Task: HME_CLIENT_UPDATE_METADATA
Opcode: Start

Fields #

Name	Description
`ID` UnicodeString
`Item` UInt32
`Atom` UInt32

Event ID 363: HME_CLIENT_UPDATE_METADATAStop

Channel: Operational
Task: HME_CLIENT_UPDATE_METADATA
Opcode: Stop

Fields #

Name	Description
`ID` UnicodeString
`Item` UInt32
`Atom` UInt32
`HRESULT` UInt32

Event ID 364: HME_SERVER_ONLINE_OFFLINE

Channel: Operational
Task: HME_SERVER_ONLINE_OFFLINE

Fields #

Name	Description
`ServerUDN` UnicodeString
`Offline` Boolean

Event ID 365: HME_SERVER_MAGIC_PACKET_SENT

Channel: Operational
Task: HME_SERVER_MAGIC_PACKET_SENT

Fields #

Name	Description
`ID` UnicodeString

Event ID 366: HME_SERVER_WAKEUP_FAILED

Channel: Operational
Task: HME_SERVER_WAKEUP_FAILED

Fields #

Name	Description
`ID` UnicodeString

Event ID 370: HME_EnableSharingStart

Channel: Operational
Task: HME_EnableSharing
Opcode: Start

Fields #

Name	Description
`IWMMediaLibrary` Pointer
`EnableSharing` Boolean
`UpdateACLs` Boolean
`HRESULT` UInt32

Event ID 371: HME_EnableSharingStop

Channel: Operational
Task: HME_EnableSharing
Opcode: Stop

Fields #

Name	Description
`IWMMediaLibrary` Pointer
`EnableSharing` Boolean
`UpdateACLs` Boolean
`HRESULT` UInt32

Event ID 372: HME_UPnPDiscoveryBeginStart

Channel: Operational
Task: HME_UPnPDiscoveryBegin
Opcode: Start

Fields #

Name	Description
`IgnoreUPnPDiscovery` Boolean
`HRESULT` UInt32

Event ID 373: HME_UPnPDiscoveryBeginStop

Channel: Operational
Task: HME_UPnPDiscoveryBegin
Opcode: Stop

Fields #

Name	Description
`IgnoreUPnPDiscovery` Boolean
`HRESULT` UInt32

Event ID 374: HME_UPnPDiscoveryInitialComplete

Channel: Operational
Task: HME_UPnPDiscoveryInitialComplete

Fields #

Name	Description
`HRESULT` UInt32

Event ID 375: HME_UPnPDiscoveryEnd

Channel: Operational
Task: HME_UPnPDiscoveryEnd

Fields #

Name	Description
`HRESULT` UInt32

Event ID 376: HME_UPnPDeviceAddedCallbackStart

Channel: Operational
Task: HME_UPnPDeviceAddedCallback
Opcode: Start

Fields #

Name	Description
`IUPnPDevice` Pointer
`UDN` UnicodeString
`FriendlyName` UnicodeString
`HRESULT` UInt32

Event ID 377: HME_UPnPDeviceAddedCallback

Channel: Operational
Task: HME_UPnPDeviceAddedCallback

Fields #

Name	Description
`IUPnPDevice` Pointer
`UDN` UnicodeString
`FriendlyName` UnicodeString
`HRESULT` UInt32

Event ID 378: HME_UPnPDeviceAddedCallback378

Channel: Operational
Task: HME_UPnPDeviceAddedCallback

Fields #

Name	Description
`IUPnPDevice` Pointer
`UDN` UnicodeString
`FriendlyName` UnicodeString
`HRESULT` UInt32

Event ID 379: HME_UPnPDeviceAddedCallbackStop

Channel: Operational
Task: HME_UPnPDeviceAddedCallback
Opcode: Stop

Fields #

Name	Description
`IUPnPDevice` Pointer
`UDN` UnicodeString
`FriendlyName` UnicodeString
`HRESULT` UInt32

Event ID 380: HME_UPnPDeviceRemovedCallbackStart

Channel: Operational
Task: HME_UPnPDeviceRemovedCallback
Opcode: Start

Fields #

Name	Description
`UDN` UnicodeString
`HRESULT` UInt32

Event ID 381: HME_UPnPDeviceRemovedCallback

Channel: Operational
Task: HME_UPnPDeviceRemovedCallback

Fields #

Name	Description
`UDN` UnicodeString
`IHMEService` Pointer

Event ID 382: HME_UPnPDeviceRemovedCallbackStop

Channel: Operational
Task: HME_UPnPDeviceRemovedCallback
Opcode: Stop

Fields #

Name	Description
`UDN` UnicodeString
`HRESULT` UInt32

Event ID 383: HME_InitCDSThreadStart

Channel: Operational
Task: HME_InitCDSThread
Opcode: Start

Fields #

Name	Description
`UDN` UnicodeString
`IUPnPDevice` Pointer
`HRESULT` UInt32

Event ID 384: HME_InitCDSThreadStop

Channel: Operational
Task: HME_InitCDSThread
Opcode: Stop

Fields #

Name	Description
`UDN` UnicodeString
`IUPnPDevice` Pointer
`HRESULT` UInt32

Event ID 385: HME_InitCDSStart

Channel: Operational
Task: HME_InitCDS
Opcode: Start

Fields #

Name	Description
`UDN` UnicodeString
`IUPnPDevice` Pointer

Event ID 386: HME_InitCDSStop

Channel: Operational
Task: HME_InitCDS
Opcode: Stop

Fields #

Name	Description
`UDN` UnicodeString
`IUPnPDevice` Pointer
`IHMEService` Pointer
`HRESULT` UInt32

Event ID 389: HME_ServiceAddedStart

Channel: Operational
Task: HME_ServiceAdded
Opcode: Start

Fields #

Name	Description
`IHMEService` Pointer
`HRESULT` UInt32

Event ID 390: HME_ServiceAdded

Channel: Operational
Task: HME_ServiceAdded

Fields #

Name	Description
`IHMEService` Pointer
`UDN` UnicodeString

Event ID 391: HME_ServiceAddedStop

Channel: Operational
Task: HME_ServiceAdded
Opcode: Stop

Fields #

Name	Description
`IHMEService` Pointer
`HRESULT` UInt32

Event ID 392: HME_CDSUPnPInitializeStart

Channel: Operational
Task: HME_CDSUPnPInitialize
Opcode: Start

Fields #

Name	Description
`IUPnPDevice` Pointer

Event ID 393: HME_CDSUPnPInitializeStop

Channel: Operational
Task: HME_CDSUPnPInitialize
Opcode: Stop

Fields #

Name	Description
`IUPnPDevice` Pointer
`UDN` UnicodeString
`FriendlyName` UnicodeString
`CDSVersion` UInt32
`IsSearchable` Boolean
`SupportsRME` Boolean
`SupportsWakeOnLAN` Boolean
`IHMEProvider` Pointer
`HRESULT` UInt32

Event ID 394: HME_ProviderAddToRAMCacheStart

Channel: Operational
Task: HME_ProviderAddToRAMCache
Opcode: Start

Fields #

Name	Description
`CHMEProvider` Pointer
`IHMECDS` Pointer
`UDN` UnicodeString
`RAMCacheId` UInt32
`IsAuthorized` Boolean
`FireEvent` Boolean
`HRESULT` UInt32

Event ID 395: HME_ProviderAddToRAMCacheStop

Channel: Operational
Task: HME_ProviderAddToRAMCache
Opcode: Stop

Fields #

Name	Description
`CHMEProvider` Pointer
`IHMECDS` Pointer
`UDN` UnicodeString
`RAMCacheId` UInt32
`IsAuthorized` Boolean
`FireEvent` Boolean
`HRESULT` UInt32

Event ID 396: HME_ProviderShutdownStart

Channel: Operational
Task: HME_ProviderShutdown
Opcode: Start

Fields #

Name	Description
`CHMEProvider` Pointer
`IHMECDS` Pointer
`UDN` UnicodeString
`RAMCacheId` UInt32
`IsAuthorized` Boolean
`IsZombie` Boolean
`FireEvent` Boolean

Event ID 397: HME_ProviderShutdownStop

Channel: Operational
Task: HME_ProviderShutdown
Opcode: Stop

Fields #

Name	Description
`CHMEProvider` Pointer
`IHMECDS` Pointer
`UDN` UnicodeString
`RAMCacheId` UInt32
`IsAuthorized` Boolean
`IsZombie` Boolean
`FireEvent` Boolean

Event ID 398: HME_ProviderUpdateMessage

Channel: Operational
Task: HME_ProviderUpdateMessage

Fields #

Name	Description
`RAMCacheId` UInt32
`IsAdding` Boolean
`FireEvent` Boolean

Event ID 400: Transcode has started.

Channel: WMPSyncEngine
Task: WMPSyncTranscodeManager
Opcode: Start

Description

Transcode has started. Source file: SourcePath, Target File: TargetPath.

Message #

Transcode has started.  Source file: %1, Target File: %2

Fields #

Name	Description
`SourcePath` UnicodeString
`TargetPath` UnicodeString

Event ID 401: Transcode has rolled over to using the dshow source.

Channel: WMPSyncEngine
Task: WMPSyncTranscodeManager
Opcode: ThetranscodemanagerhasrolledovertotheDShowSource

Description

Transcode has rolled over to using the dshow source. Source file: SourcePath, Target file: TargetPath.

Message #

Transcode has rolled over to using the dshow source.  Source file: %1, Target file: %2

Fields #

Name	Description
`SourcePath` UnicodeString
`TargetPath` UnicodeString

Event ID 402: Transcode has rolled over to the WMEncode API.

Channel: WMPSyncEngine

Description

Transcode has rolled over to the WMEncode API. Source file: {SourcePath}; Target File: {TargetPath}.

Message #

Transcode has rolled over to the WMEncode API.  Source file: {SourcePath}; Target File: {TargetPath}

Fields #

Name	Description
`SourcePath`
`TargetPath`

Event ID 403: Transcode has completed.

Channel: WMPSyncEngine
Task: WMPSyncTranscodeManager
Opcode: Stop

Description

Transcode has completed. Source file: SourcePath, Target File: TargetPath, HRESULT HRESULT.

Message #

Transcode has completed.  Source file: %1, Target File: %2, HRESULT %3

Fields #

Name	Description
`SourcePath` UnicodeString
`TargetPath` UnicodeString
`HRESULT` UInt32

Event ID 404: Transcode matrix is using MP4 matrix

Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: UsingtheMP4transcodematrix

Event ID 405: Transcode matrix is using ASF matrix

Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: UsingtheASFtranscodematrix

Event ID 406: IsTranscodeNeeded for source file SourceFile (DRM flag: IsDRM) has started.

Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: Start

Message #

IsTranscodeNeeded for source file %1 (DRM flag: %2) has started.

Fields #

Name	Description
`SourceFile` UnicodeString
`IsDRM` Boolean

Event ID 407: IsTranscodeNeeded for source file SourceFile has stopped.

Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: Stop

Description

IsTranscodeNeeded for source file SourceFile has stopped. HRESULT: HRESULT.

Message #

IsTranscodeNeeded for source file %1 has stopped.  HRESULT: %2

Fields #

Name	Description
`SourceFile` UnicodeString
`HRESULT` UInt32

Event ID 408: GetTranscodeProfile for source file SourceFile has started.

Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: Start

Message #

GetTranscodeProfile for source file %1 has started

Fields #

Name	Description
`SourceFile` UnicodeString

Event ID 409: GetTranscodeProfile for source file SourceFile has stopped.

Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: Stop

Description

GetTranscodeProfile for source file SourceFile has stopped. HRESULT: HRESULT.

Message #

GetTranscodeProfile for source file %1 has stopped.  HRESULT: %2

Fields #

Name	Description
`SourceFile` UnicodeString
`HRESULT` UInt32

Event ID 410: Sync engine is attempting to acquire a license for file SourceFile.

Channel: WMPSyncEngine
Task: WMPSyncLicenseAcquisition
Opcode: Start

Message #

Sync engine is attempting to acquire a license for file %1

Fields #

Name	Description
`SourceFile` UnicodeString

Event ID 411: Sync engine has finished attempt to acquire license for file SourceFile.

Channel: WMPSyncEngine
Task: WMPSyncLicenseAcquisition
Opcode: Stop

Description

Sync engine has finished attempt to acquire license for file SourceFile. HRESULT: HRESULT.

Message #

Sync engine has finished attempt to acquire license for file %1.  HRESULT: %2

Fields #

Name	Description
`SourceFile` UnicodeString
`HRESULT` UInt32

Event ID 412: PLAYTOMENU_ENUMERATIONStart

Channel: Operational
Task: PLAYTOMENU_ENUMERATION
Opcode: Start

Event ID 413: PLAYTOMENU_ENUMERATIONStop

Channel: Operational
Task: PLAYTOMENU_ENUMERATION
Opcode: Stop

Fields #

Name	Description
`numberofDMRsFound` UInt32
`result` UInt32
`failureReason` UInt32

Event ID 414: PLAYTOMENU_OPERATIONStart

Channel: Operational
Task: PLAYTOMENU_OPERATION
Opcode: Start

Event ID 415: PLAYTOMENU_OPERATION

Channel: Operational
Task: PLAYTOMENU_OPERATION

Fields #

Name	Description
`UDN` UnicodeString
`result` UInt32

Event ID 416: PLAYTOMENU_OPERATIONStop

Channel: Operational
Task: PLAYTOMENU_OPERATION
Opcode: Stop

Fields #

Name	Description
`UDN` UnicodeString
`result` UInt32
`failureReason` UInt32

Event ID 417: WMPDMR_AVTRANSPORT_ACTIONSStart

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 418: WMPDMR_AVTRANSPORT_ACTIONSStop

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 419: WMPDMR_AVTRANSPORT_ACTIONSStart419

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Fields #

Name	Description
`URI` UnicodeString
`URIMetadata` UnicodeString

Event ID 420: WMPDMR_AVTRANSPORT_ACTIONSStop420

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 425: STREAMING_MENU_ACTIONSStart

Channel: Operational
Task: STREAMING_MENU_ACTIONS
Opcode: Start

Event ID 426: STREAMING_MENU_ACTIONSStop

Channel: Operational
Task: STREAMING_MENU_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 427: CONFIGURE_STREAMING_MENU_ACTIONStart

Channel: Operational
Task: CONFIGURE_STREAMING_MENU_ACTION
Opcode: Start

Event ID 428: CONFIGURE_STREAMING_MENU_ACTIONStop

Channel: Operational
Task: CONFIGURE_STREAMING_MENU_ACTION
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 429: RECEIVE_MEDIA_MENU_ACTIONStart

Channel: Operational
Task: RECEIVE_MEDIA_MENU_ACTION
Opcode: Start

Event ID 430: RECEIVE_MEDIA_MENU_ACTIONStop

Channel: Operational
Task: RECEIVE_MEDIA_MENU_ACTION
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 433: STREAMING_MENU_RENDER_ACTIONStart

Channel: Operational
Task: STREAMING_MENU_RENDER_ACTION
Opcode: Start

Event ID 434: STREAMING_MENU_RENDER_ACTIONStop

Channel: Operational
Task: STREAMING_MENU_RENDER_ACTION
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 436: STREAMING_MENUITEM_RECEIVEMEDIA_CHECKSTATE

Channel: Operational
Task: STREAMING_MENUITEM_RECEIVEMEDIA_CHECKSTATE

Fields #

Name	Description
`IsChecked` Boolean

Event ID 437: STREAMING_MENUITEM_AUTOALLOWDEVICES_CHECKSTATE

Channel: Operational
Task: STREAMING_MENUITEM_AUTOALLOWDEVICES_CHECKSTATE

Fields #

Name	Description
`IsChecked` Boolean

Event ID 438: ALLOW_ALL_DEVICES_MENU_ACTIONStart

Channel: Operational
Task: ALLOW_ALL_DEVICES_MENU_ACTION
Opcode: Start

Event ID 439: ALLOW_ALL_DEVICES_MENU_ACTIONStop

Channel: Operational
Task: ALLOW_ALL_DEVICES_MENU_ACTION
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 440: CONFIGURE_STREAMING_HG_MENU_ACTIONStart

Channel: Operational
Task: CONFIGURE_STREAMING_HG_MENU_ACTION
Opcode: Start

Event ID 441: CONFIGURE_STREAMING_HG_MENU_ACTIONStop

Channel: Operational
Task: CONFIGURE_STREAMING_HG_MENU_ACTION
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 450: PLAYSINGLE_PH_RESOLVEStart

Channel: Operational
Task: PLAYSINGLE_PH_RESOLVE
Opcode: Start

Fields #

Name	Description
`ProtocolHandler` Pointer
`URL` UnicodeString
`IInternetProtocolSink` Pointer

Event ID 451: PLAYSINGLE_PH_RESOLVE

Channel: Operational
Task: PLAYSINGLE_PH_RESOLVE

Fields #

Name	Description
`ProtocolHandler` Pointer
`IInternetProtocolSink` Pointer
`UDN` UnicodeString
`ServiceID` UnicodeString
`ObjectID` UnicodeString
`IHMECDS` Pointer

Event ID 452: PLAYSINGLE_PH_RESOLVEStop

Channel: Operational
Task: PLAYSINGLE_PH_RESOLVE
Opcode: Stop

Fields #

Name	Description
`ProtocolHandler` Pointer
`IInternetProtocolSink` Pointer
`UDN` UnicodeString
`ServiceID` UnicodeString
`ObjectID` UnicodeString
`HResult` UInt32

Event ID 453: PLAYSINGLE_PH_BROWSECDSStart

Channel: Operational
Task: PLAYSINGLE_PH_BROWSECDS
Opcode: Start

Fields #

Name	Description
`ProtocolHandler` Pointer
`UDN` UnicodeString
`ObjectID` UnicodeString
`IHMECDS` Pointer
`HResult` UInt32

Event ID 454: PLAYSINGLE_PH_BROWSECDS

Channel: Operational
Task: PLAYSINGLE_PH_BROWSECDS

Fields #

Name	Description
`ProtocolHandler` Pointer
`UDN` UnicodeString
`ObjectID` UnicodeString
`ASX` AnsiString
`HResult` UInt32

Event ID 455: PLAYSINGLE_PH_BROWSECDSStop

Channel: Operational
Task: PLAYSINGLE_PH_BROWSECDS
Opcode: Stop

Fields #

Name	Description
`ProtocolHandler` Pointer
`UDN` UnicodeString
`ObjectID` UnicodeString
`IHMECDS` Pointer
`HResult` UInt32

Event ID 456: PLAYCONTAINER_CREATE_PLAYLISTStart

Channel: Operational
Task: PLAYCONTAINER_CREATE_PLAYLIST
Opcode: Start

Fields #

Name	Description
`PlaylistMgr` Pointer
`URL` UnicodeString

Event ID 457: PLAYCONTAINER_CREATE_PLAYLISTStop

Channel: Operational
Task: PLAYCONTAINER_CREATE_PLAYLIST
Opcode: Stop

Fields #

Name	Description
`PlaylistMgr` Pointer
`URL` UnicodeString
`IWMPPlaylist` Pointer
`HResult` UInt32

Event ID 460: WMPDMR_AVTRANSPORT_ACTIONSStart460

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 461: WMPDMR_AVTRANSPORT_ACTIONSStop461

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 462: WMPDMR_AVTRANSPORT_ACTIONSStart462

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Fields #

Name	Description
`instanceID` UInt64

Event ID 463: WMPDMR_AVTRANSPORT_ACTIONSStop463

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32
`instanceID` UInt64
`Track` Int64
`TrackDuration` UnicodeString
`MetaData` UnicodeString
`TrackURI` UnicodeString

Event ID 464: WMPDMR_AVTRANSPORT_ACTIONSStart464

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 465: WMPDMR_AVTRANSPORT_ACTIONSStop465

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 466: WMPDMR_AVTRANSPORT_ACTIONSStart466

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 467: WMPDMR_AVTRANSPORT_ACTIONSStop467

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 468: WMPDMR_AVTRANSPORT_ACTIONSStart468

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 469: WMPDMR_AVTRANSPORT_ACTIONSStop469

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 470: WMPDMR_AVTRANSPORT_ACTIONSStart470

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 471: WMPDMR_AVTRANSPORT_ACTIONSStop471

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 472: WMPDMR_AVTRANSPORT_ACTIONSStart472

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 473: WMPDMR_AVTRANSPORT_ACTIONSStop473

Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 474: WMPDMR_CONNECTION_MANAGER_ACTIONSStart

Channel: Operational
Task: WMPDMR_CONNECTION_MANAGER_ACTIONS
Opcode: Start

Event ID 475: WMPDMR_CONNECTION_MANAGER_ACTIONSStop

Channel: Operational
Task: WMPDMR_CONNECTION_MANAGER_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 476: WMPDMR_RENDERING_CONTROL_ACTIONSStart

Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Start

Event ID 477: WMPDMR_RENDERING_CONTROL_ACTIONSStop

Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 478: WMPDMR_RENDERING_CONTROL_ACTIONSStart478

Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Start

Event ID 479: WMPDMR_RENDERING_CONTROL_ACTIONSStop479

Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 480: WMPDMR_RENDERING_CONTROL_ACTIONSStart480

Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Start

Event ID 481: WMPDMR_RENDERING_CONTROL_ACTIONSStop481

Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 482: WMPDMR_RENDERING_CONTROL_ACTIONSStart482

Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Start

Event ID 483: WMPDMR_RENDERING_CONTROL_ACTIONSStop483

Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 490: CDDVD_LAUNCHStart

Channel: Operational
Task: CDDVD_LAUNCH
Opcode: Start

Fields #

Name	Description
`Key` UInt32

Event ID 491: CDDVD_LAUNCHLOCAL_PLAY_BEGIN

Channel: Operational
Task: CDDVD_LAUNCH
Opcode: LOCAL_PLAY_BEGIN

Fields #

Name	Description
`Key` UInt32

Event ID 492: CDDVD_LAUNCHLOCAL_PLAY_BEGIN492

Channel: Operational
Task: CDDVD_LAUNCH
Opcode: LOCAL_PLAY_BEGIN

Fields #

Name	Description
`Key` UInt32

Event ID 493: CDDVD_LAUNCHStop

Channel: Operational
Task: CDDVD_LAUNCH
Opcode: Stop

Fields #

Name	Description
`Key` UInt32

Event ID 501: Transcode matrix is using MP3 matrix

Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: UsingtheMP3transcodematrix

Event ID 1305: SKINCLOSEStart

Channel: Operational
Task: SKINCLOSE
Opcode: Start

Event ID 1306: SKINCLOSEStop

Channel: Operational
Task: SKINCLOSE
Opcode: Stop

Event ID 1307: APPCLOSEStart

Channel: Operational
Task: APPCLOSE
Opcode: Start

Event ID 1308: APPCLOSEStop

Channel: Operational
Task: APPCLOSE
Opcode: Stop

Event ID 1309: SKINPAINTStart1309

Channel: Operational
Task: SKINPAINT
Opcode: Start

Event ID 1310: SKINPAINTStop1310

Channel: Operational
Task: SKINPAINT
Opcode: Stop

Event ID 1311: SKINPAINTStart1311

Channel: Operational
Task: SKINPAINT
Opcode: Start

Event ID 1312: SKINPAINTStop1312

Channel: Operational
Task: SKINPAINT
Opcode: Stop

Event ID 1313: SKINPAINTStart1313

Channel: Operational
Task: SKINPAINT
Opcode: Start

Event ID 1314: SKINPAINTStop1314

Channel: Operational
Task: SKINPAINT
Opcode: Stop

Event ID 1615: CDGRAPH

Channel: Operational
Task: CDGRAPH

Fields #

Name	Description
`DeviceName` UnicodeString
`PnPID` UnicodeString

Provenance

ETW provider GUID f3f14ff3-7b80-4868-91d0-d77e497b025e

Defined in wmp.dll, which carries the event manifest.

WS2022-20348.4893, schema read from the registered manifest, binary version 12.0.20348.2849, captured 2026-06-02 — Manifest XML pack, 1.9 MB
Win11-26200.6584, schema read from the registered manifest, binary version 12.0.26100.5074, captured 2026-06-02 — Manifest XML pack, 2.0 MB
JD-WIN11-22H2-1-native-20260719, sample captured from a live trace, binary version 12.0.22621.5415, captured 2026-07-19
Native ETL capture of controlled Windows Media Player playback workloads; identifiers were sanitized in catalog examples.