Microsoft-Windows-WMP

280 events across 2 channels

Event	Title	Channel	Sample
1	LEGACY_EVENTMEDIA_OPEN	Operational	N
2	LEGACY_EVENTPLAYLIST_OPEN_NOMEDIA	Operational	N
3	LEGACY_EVENTPLAYING	Operational	N
4	RIPStart	Operational	N
5	RIPStop	Operational	N
7	LEGACY_EVENTLOCAL_PLAY_BEGIN	Operational	N
8	LEGACY_EVENTSTREAMING_PLAY_BEGIN	Operational	N
9	PDA_TRANSFERStart	Operational	N
10	PDA_TRANSFERStop	Operational	N
11	LEGACY_EVENTADD_FILES_LIBRARY_END	Operational	N
12	SEARCHFORMEDIAStart	Operational	N
13	SEARCHFORMEDIAStop	Operational	N
14	LEGACY_EVENTDELETESELECTED_END	Operational	N
15	LEGACY_EVENTBEFORENAVIGATE2	Operational	N
16	LEGACY_EVENTDOCUMENTCOMPLETE	Operational	N
17	LEGACY_EVENTTRANSITIONING	Operational	N
18	LEGACY_EVENTMEDIA_ENDED	Operational	N
19	TASK_SWITCHStart	Operational	N
20	TASK_SWITCHStop	Operational	N
21	PDA_DISCOVERYStart	Operational	N
22	PDA_DISCOVERYStop	Operational	N
23	LEGACY_EVENTERROR_DIALOG	Operational	N
24	LEGACY_EVENTEXCEPTION_THROWN	Operational	N
25	LEGACY_EVENTAPP_IDLE	Operational	N
26	LEGACY_EVENTPLAYLIST_POPULATED	Operational	N
27	LEGACY_EVENTOCX_FIRST_PAINT	Operational	N
28	LEGACY_EVENTTREEVIEW_EXPANDED	Operational	N
29	LEGACY_EVENTFULLSCREEN	Operational	N
30	LEGACY_EVENTBULKEDITCOMPLETE	Operational	N
31	LEGACY_EVENTNODERENAMECOMPLETE	Operational	N
32	LEGACY_EVENTDROPCOMPLETE	Operational	N
33	LEGACY_EVENTCOLUMNSORTCOMPLETE	Operational	N
34	LEGACY_EVENTOCXSETCLIENTSITE	Operational	N
35	LEGACY_EVENTOCXACTIVATED	Operational	N
36	LEGACY_EVENTDEVICEINDIVSETCLOCK	Operational	N
37	PDA_TRANSCODEStart	Operational	N
38	PDA_TRANSCODEStop	Operational	N
39	PDA_TRANSFER_FILEStart	Operational	N
40	PDA_TRANSFER_FILEStop	Operational	N
41	PDA_NEWSYNCStart	Operational	N
42	PDA_NEWSYNCStop	Operational	N
43	APP_NAVIGATEStart	Operational	N
44	APP_NAVIGATEStop	Operational	N
45	LEGACY_EVENTSQM_UPLOAD_SIGNAL	Operational	N
46	PDA_DEVICE_ENUMERATIONStart	Operational	N
47	PDA_DEVICE_ENUMERATIONStop	Operational	N
48	LEGACY_EVENTPROC_START	Operational	N
49	LEGACY_EVENTPROC_END	Operational	N
50	LEGACY_EVENTDLL_START	Operational	N
51	LEGACY_EVENTDLL_END	Operational	N
52	LEGACY_EVENTHME_SERVICEADDED	Operational	N
53	HME_INITIALDISCOVERYStart	Operational	N
54	HME_INITIALDISCOVERYStop	Operational	N
55	HME_EXECUTEQUERYStart	Operational	N
56	HME_EXECUTEQUERYStop	Operational	N
57	HME_BROWSEStart	Operational	N
58	HME_BROWSEStop	Operational	N
59	LEGACY_EVENTPDA_DEVICE_DETECTED	Operational	N
60	APP_LAUNCHStart	Operational	N
61	APP_LAUNCHStop	Operational	N
62	PARSE_CMD_LINEStart	Operational	N
63	PARSE_CMD_LINEStop	Operational	N
64	PROCESS_CMD_LINEStart	Operational	N
65	PROCESS_CMD_LINEStop	Operational	N
66	APPLY_SKINStart	Operational	N
67	APPLY_SKINStop	Operational	N
68	RESTORE_FROM_SKINStart	Operational	N
69	RESTORE_FROM_SKINStop	Operational	N
70	FULLSCREENStart	Operational	N
71	FULLSCREENStop	Operational	N
72	TASKBARStart	Operational	N
73	TASKBARStop	Operational	N
74	MODE_SWITCHER	Operational	N
75	DSHOWGRAPH_OPEN	Operational	N
76	FSDKGRAPH_OPEN	Operational	N
77	MFGRAPH_OPEN	Operational	N
78	CDBURNStart	Operational	N
79	CDBURNStop	Operational	N
80	CDBURNCheckpoint_1	Operational	N
81	CDBURNCheckpoint_2	Operational	N
82	PLAYBACKStateChange	Operational	N
83	FULLSCREENCLOSEBUTTON_CLICK	Operational	N
84	DDPRESET_NORMAL	Operational	N
85	DDPRESET_LAPTOP	Operational	N
86	DDPRESET_THEATER	Operational	N
87	DISCMEDIACHANGEAdded	Operational	N
88	DISCMEDIACHANGERemoved	Operational	N
89	DISCMEDIACHANGE	Operational	N
90	FULLSCREENEXITBUTTON_CLICK	Operational	N
91	MAINFRAME_DESTROYStart	Operational	N
92	MAINFRAME_DESTROYStop	Operational	N
93	FULLSCREEN_LOADINGUIStart	Operational	N
94	FULLSCREEN_LOADINGUIStop	Operational	N
95	FULLSCREEN_LOADINGUI_FADEStart	Operational	N
96	FULLSCREEN_LOADINGUI_FADEStop	Operational	N
97	DVDGRAPH	Operational	N
99	GROVELER	Operational	N
100	GROVELER100	Operational	N
101	GROVELER101	Operational	N
102	GROVELER102	Operational	N
103	GROVELER103	Operational	N
104	GROVELER104	Operational	N
105	GROVELERStart	Operational	N
106	GROVELERStop	Operational	N
107	GROVELER107	Operational	N
108	GROVELER108	Operational	N
109	GROVELER109	Operational	N
110	GROVELER110	Operational	N
149	METADATAPLUGIN	Operational	N
150	METADATAPLUGIN150	Operational	N
151	METADATAPLUGIN151	Operational	N
152	METADATAPLUGIN152	Operational	N
153	METADATAPLUGIN153	Operational	N
154	METADATAPLUGIN154	Operational	N
155	RAMCACHE	Operational	N
156	RAMCACHE156	Operational	N
157	RAMCACHEStart	Operational	N
158	RAMCACHEStop	Operational	N
200	METADATALIFECYCLE	Operational	N
201	METADATADOWNLOADStart	Operational	N
202	METADATADOWNLOADStop	Operational	N
205	MLS	Operational	N
206	MLS206	Operational	N
207	MLS207	Operational	N
220	PLAYLISTStart	Operational	N
221	PLAYLISTStop	Operational	N
222	PLAYHISTORYCLICK	Operational	N
250	RADIO	Operational	N
251	RADIORemoved	Operational	N
252	RADIOAdded	Operational	N
280	THUMBNAIL_TOOLBAR_ADDStart	Operational	N
281	THUMBNAIL_TOOLBAR_ADDStop	Operational	N
282	THUMBNAIL_TOOLBAR_BUTTON_CLICKEDStart	Operational	N
283	THUMBNAIL_TOOLBAR_BUTTON_CLICKEDStop	Operational	N
284	THUMBNAIL_TOOLTIP_CHANGED	Operational	N
285	THUMBNAIL_BITMAPS_INVALIDATED	Operational	N
286	THUMBNAIL_BITMAP_UPDATEStart	Operational	N
287	THUMBNAIL_BITMAP_UPDATEStop	Operational	N
288	THUMBNAIL_LIVEPREVIEWBITMAP_UPDATEStart	Operational	N
289	THUMBNAIL_LIVEPREVIEWBITMAP_UPDATEStop	Operational	N
300	SKINEVENT	Operational	N
301	HOVERTRANSPORTSStart	Operational	N
302	HOVERTRANSPORTSStop	Operational	N
303	SKINPAINTStart	Operational	N
304	SKINPAINTStop	Operational	N
305	BASKETStart	Operational	N
306	BASKETStop	Operational	N
307	NAVIGATION	Operational	N
308	LISTVIEW	Operational	N
309	LISTVIEWStart	Operational	N
310	LISTVIEWStop	Operational	N
311	TREEVIEW	Operational	N
312	PLAYHISTORY	Operational	N
313	LIBRARYUX	Operational	N
314	LIBRARYUX314	Operational	N
315	USAGELOGGER	Operational	N
316	WORDWHEELStart	Operational	N
317	WORDWHEELStop	Operational	N
318	WORDWHEELStop318	Operational	N
323	HME_SERVER_CONTAINER_UPDATE_IDSStart	Operational	N
324	HME_SERVER_CONTAINER_UPDATE_IDSStop	Operational	N
356	HME_SERVER_EXECUTE_QUERYStart	Operational	N
357	HME_SERVER_EXECUTE_QUERYStop	Operational	N
360	HME_SERVER_UPDATEOBJECTStart	Operational	N
361	HME_SERVER_UPDATEOBJECTStop	Operational	N
362	HME_CLIENT_UPDATE_METADATAStart	Operational	N
363	HME_CLIENT_UPDATE_METADATAStop	Operational	N
364	HME_SERVER_ONLINE_OFFLINE	Operational	N
365	HME_SERVER_MAGIC_PACKET_SENT	Operational	N
366	HME_SERVER_WAKEUP_FAILED	Operational	N
370	HME_EnableSharingStart	Operational	N
371	HME_EnableSharingStop	Operational	N
372	HME_UPnPDiscoveryBeginStart	Operational	N
373	HME_UPnPDiscoveryBeginStop	Operational	N
374	HME_UPnPDiscoveryInitialComplete	Operational	N
375	HME_UPnPDiscoveryEnd	Operational	N
376	HME_UPnPDeviceAddedCallbackStart	Operational	N
377	HME_UPnPDeviceAddedCallback	Operational	N
378	HME_UPnPDeviceAddedCallback378	Operational	N
379	HME_UPnPDeviceAddedCallbackStop	Operational	N
380	HME_UPnPDeviceRemovedCallbackStart	Operational	N
381	HME_UPnPDeviceRemovedCallback	Operational	N
382	HME_UPnPDeviceRemovedCallbackStop	Operational	N
383	HME_InitCDSThreadStart	Operational	N
384	HME_InitCDSThreadStop	Operational	N
385	HME_InitCDSStart	Operational	N
386	HME_InitCDSStop	Operational	N
389	HME_ServiceAddedStart	Operational	N
390	HME_ServiceAdded	Operational	N
391	HME_ServiceAddedStop	Operational	N
392	HME_CDSUPnPInitializeStart	Operational	N
393	HME_CDSUPnPInitializeStop	Operational	N
394	HME_ProviderAddToRAMCacheStart	Operational	N
395	HME_ProviderAddToRAMCacheStop	Operational	N
396	HME_ProviderShutdownStart	Operational	N
397	HME_ProviderShutdownStop	Operational	N
398	HME_ProviderUpdateMessage	Operational	N
400	Transcode has started.	WMPSyncEngine	N
401	Transcode has rolled over to using the dshow source.	WMPSyncEngine	N
402	Transcode has rolled over to the WMEncode API.	WMPSyncEngine	N
403	Transcode has completed.	WMPSyncEngine	N
404	Transcode matrix is using MP4 matrix	WMPSyncEngine	N
405	Transcode matrix is using ASF matrix	WMPSyncEngine	N
406	IsTranscodeNeeded for source file SourceFile (DRM flag: IsDRM) has started.	WMPSyncEngine	N
407	IsTranscodeNeeded for source file SourceFile has stopped.	WMPSyncEngine	N
408	GetTranscodeProfile for source file SourceFile has started.	WMPSyncEngine	N
409	GetTranscodeProfile for source file SourceFile has stopped.	WMPSyncEngine	N
410	Sync engine is attempting to acquire a license for file SourceFile.	WMPSyncEngine	N
411	Sync engine has finished attempt to acquire license for file SourceFile.	WMPSyncEngine	N
412	PLAYTOMENU_ENUMERATIONStart	Operational	N
413	PLAYTOMENU_ENUMERATIONStop	Operational	N
414	PLAYTOMENU_OPERATIONStart	Operational	N
415	PLAYTOMENU_OPERATION	Operational	N
416	PLAYTOMENU_OPERATIONStop	Operational	N
417	WMPDMR_AVTRANSPORT_ACTIONSStart	Operational	N
418	WMPDMR_AVTRANSPORT_ACTIONSStop	Operational	N
419	WMPDMR_AVTRANSPORT_ACTIONSStart419	Operational	N
420	WMPDMR_AVTRANSPORT_ACTIONSStop420	Operational	N
425	STREAMING_MENU_ACTIONSStart	Operational	N
426	STREAMING_MENU_ACTIONSStop	Operational	N
427	CONFIGURE_STREAMING_MENU_ACTIONStart	Operational	N
428	CONFIGURE_STREAMING_MENU_ACTIONStop	Operational	N
429	RECEIVE_MEDIA_MENU_ACTIONStart	Operational	N
430	RECEIVE_MEDIA_MENU_ACTIONStop	Operational	N
433	STREAMING_MENU_RENDER_ACTIONStart	Operational	N
434	STREAMING_MENU_RENDER_ACTIONStop	Operational	N
436	STREAMING_MENUITEM_RECEIVEMEDIA_CHECKSTATE	Operational	N
437	STREAMING_MENUITEM_AUTOALLOWDEVICES_CHECKSTATE	Operational	N
438	ALLOW_ALL_DEVICES_MENU_ACTIONStart	Operational	N
439	ALLOW_ALL_DEVICES_MENU_ACTIONStop	Operational	N
440	CONFIGURE_STREAMING_HG_MENU_ACTIONStart	Operational	N
441	CONFIGURE_STREAMING_HG_MENU_ACTIONStop	Operational	N
450	PLAYSINGLE_PH_RESOLVEStart	Operational	N
451	PLAYSINGLE_PH_RESOLVE	Operational	N
452	PLAYSINGLE_PH_RESOLVEStop	Operational	N
453	PLAYSINGLE_PH_BROWSECDSStart	Operational	N
454	PLAYSINGLE_PH_BROWSECDS	Operational	N
455	PLAYSINGLE_PH_BROWSECDSStop	Operational	N
456	PLAYCONTAINER_CREATE_PLAYLISTStart	Operational	N
457	PLAYCONTAINER_CREATE_PLAYLISTStop	Operational	N
460	WMPDMR_AVTRANSPORT_ACTIONSStart460	Operational	N
461	WMPDMR_AVTRANSPORT_ACTIONSStop461	Operational	N
462	WMPDMR_AVTRANSPORT_ACTIONSStart462	Operational	N
463	WMPDMR_AVTRANSPORT_ACTIONSStop463	Operational	N
464	WMPDMR_AVTRANSPORT_ACTIONSStart464	Operational	N
465	WMPDMR_AVTRANSPORT_ACTIONSStop465	Operational	N
466	WMPDMR_AVTRANSPORT_ACTIONSStart466	Operational	N
467	WMPDMR_AVTRANSPORT_ACTIONSStop467	Operational	N
468	WMPDMR_AVTRANSPORT_ACTIONSStart468	Operational	N
469	WMPDMR_AVTRANSPORT_ACTIONSStop469	Operational	N
470	WMPDMR_AVTRANSPORT_ACTIONSStart470	Operational	N
471	WMPDMR_AVTRANSPORT_ACTIONSStop471	Operational	N
472	WMPDMR_AVTRANSPORT_ACTIONSStart472	Operational	N
473	WMPDMR_AVTRANSPORT_ACTIONSStop473	Operational	N
474	WMPDMR_CONNECTION_MANAGER_ACTIONSStart	Operational	N
475	WMPDMR_CONNECTION_MANAGER_ACTIONSStop	Operational	N
476	WMPDMR_RENDERING_CONTROL_ACTIONSStart	Operational	N
477	WMPDMR_RENDERING_CONTROL_ACTIONSStop	Operational	N
478	WMPDMR_RENDERING_CONTROL_ACTIONSStart478	Operational	N
479	WMPDMR_RENDERING_CONTROL_ACTIONSStop479	Operational	N
480	WMPDMR_RENDERING_CONTROL_ACTIONSStart480	Operational	N
481	WMPDMR_RENDERING_CONTROL_ACTIONSStop481	Operational	N
482	WMPDMR_RENDERING_CONTROL_ACTIONSStart482	Operational	N
483	WMPDMR_RENDERING_CONTROL_ACTIONSStop483	Operational	N
490	CDDVD_LAUNCHStart	Operational	N
491	CDDVD_LAUNCHLOCAL_PLAY_BEGIN	Operational	N
492	CDDVD_LAUNCHLOCAL_PLAY_BEGIN492	Operational	N
493	CDDVD_LAUNCHStop	Operational	N
501	Transcode matrix is using MP3 matrix	WMPSyncEngine	N
1305	SKINCLOSEStart	Operational	N
1306	SKINCLOSEStop	Operational	N
1307	APPCLOSEStart	Operational	N
1308	APPCLOSEStop	Operational	N
1309	SKINPAINTStart1309	Operational	N
1310	SKINPAINTStop1310	Operational	N
1311	SKINPAINTStart1311	Operational	N
1312	SKINPAINTStop1312	Operational	N
1313	SKINPAINTStart1313	Operational	N
1314	SKINPAINTStop1314	Operational	N
1615	CDGRAPH	Operational	N

Event ID 1: LEGACY_EVENTMEDIA_OPEN

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: MEDIA_OPEN

Event ID 2: LEGACY_EVENTPLAYLIST_OPEN_NOMEDIA

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: PLAYLIST_OPEN_NOMEDIA

Event ID 3: LEGACY_EVENTPLAYING

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: PLAYING

Event ID 4: RIPStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: RIP
Opcode: Start

Event ID 5: RIPStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: RIP
Opcode: Stop

Event ID 7: LEGACY_EVENTLOCAL_PLAY_BEGIN

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: LOCAL_PLAY_BEGIN

Event ID 8: LEGACY_EVENTSTREAMING_PLAY_BEGIN

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: STREAMING_PLAY_BEGIN

Event ID 9: PDA_TRANSFERStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PDA_TRANSFER
Opcode: Start

Event ID 10: PDA_TRANSFERStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PDA_TRANSFER
Opcode: Stop

Event ID 11: LEGACY_EVENTADD_FILES_LIBRARY_END

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: ADD_FILES_LIBRARY_END

Event ID 12: SEARCHFORMEDIAStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: SEARCHFORMEDIA
Opcode: Start

Event ID 13: SEARCHFORMEDIAStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: SEARCHFORMEDIA
Opcode: Stop

Event ID 14: LEGACY_EVENTDELETESELECTED_END

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: DELETESELECTED_END

Event ID 15: LEGACY_EVENTBEFORENAVIGATE2

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: BEFORENAVIGATE2

Event ID 16: LEGACY_EVENTDOCUMENTCOMPLETE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: DOCUMENTCOMPLETE

Event ID 17: LEGACY_EVENTTRANSITIONING

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: TRANSITIONING

Event ID 18: LEGACY_EVENTMEDIA_ENDED

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: MEDIA_ENDED

Event ID 19: TASK_SWITCHStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: TASK_SWITCH
Opcode: Start

Event ID 20: TASK_SWITCHStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: TASK_SWITCH
Opcode: Stop

Event ID 21: PDA_DISCOVERYStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PDA_DISCOVERY
Opcode: Start

Event ID 22: PDA_DISCOVERYStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PDA_DISCOVERY
Opcode: Stop

Event ID 23: LEGACY_EVENTERROR_DIALOG

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: ERROR_DIALOG

Event ID 24: LEGACY_EVENTEXCEPTION_THROWN

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: EXCEPTION_THROWN

Event ID 25: LEGACY_EVENTAPP_IDLE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: APP_IDLE

Event ID 26: LEGACY_EVENTPLAYLIST_POPULATED

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: PLAYLIST_POPULATED

Event ID 27: LEGACY_EVENTOCX_FIRST_PAINT

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: OCX_FIRST_PAINT

Event ID 28: LEGACY_EVENTTREEVIEW_EXPANDED

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: TREEVIEW_EXPANDED

Event ID 29: LEGACY_EVENTFULLSCREEN

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: FULLSCREEN

Event ID 30: LEGACY_EVENTBULKEDITCOMPLETE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: BULKEDITCOMPLETE

Event ID 31: LEGACY_EVENTNODERENAMECOMPLETE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: NODERENAMECOMPLETE

Event ID 32: LEGACY_EVENTDROPCOMPLETE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: DROPCOMPLETE

Event ID 33: LEGACY_EVENTCOLUMNSORTCOMPLETE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: COLUMNSORTCOMPLETE

Event ID 34: LEGACY_EVENTOCXSETCLIENTSITE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: OCXSETCLIENTSITE

Event ID 35: LEGACY_EVENTOCXACTIVATED

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: OCXACTIVATED

Event ID 36: LEGACY_EVENTDEVICEINDIVSETCLOCK

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: DEVICEINDIVSETCLOCK

Event ID 37: PDA_TRANSCODEStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PDA_TRANSCODE
Opcode: Start

Event ID 38: PDA_TRANSCODEStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PDA_TRANSCODE
Opcode: Stop

Event ID 39: PDA_TRANSFER_FILEStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PDA_TRANSFER_FILE
Opcode: Start

Event ID 40: PDA_TRANSFER_FILEStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PDA_TRANSFER_FILE
Opcode: Stop

Event ID 41: PDA_NEWSYNCStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PDA_NEWSYNC
Opcode: Start

Event ID 42: PDA_NEWSYNCStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PDA_NEWSYNC
Opcode: Stop

Event ID 43: APP_NAVIGATEStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: APP_NAVIGATE
Opcode: Start

Event ID 44: APP_NAVIGATEStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: APP_NAVIGATE
Opcode: Stop

Event ID 45: LEGACY_EVENTSQM_UPLOAD_SIGNAL

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: SQM_UPLOAD_SIGNAL

Event ID 46: PDA_DEVICE_ENUMERATIONStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PDA_DEVICE_ENUMERATION
Opcode: Start

Event ID 47: PDA_DEVICE_ENUMERATIONStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PDA_DEVICE_ENUMERATION
Opcode: Stop

Event ID 48: LEGACY_EVENTPROC_START

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: PROC_START

Event ID 49: LEGACY_EVENTPROC_END

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: PROC_END

Event ID 50: LEGACY_EVENTDLL_START

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: DLL_START

Event ID 51: LEGACY_EVENTDLL_END

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: DLL_END

Event ID 52: LEGACY_EVENTHME_SERVICEADDED

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: HME_SERVICEADDED

Event ID 53: HME_INITIALDISCOVERYStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_INITIALDISCOVERY
Opcode: Start

Event ID 54: HME_INITIALDISCOVERYStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_INITIALDISCOVERY
Opcode: Stop

Event ID 55: HME_EXECUTEQUERYStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_EXECUTEQUERY
Opcode: Start

Event ID 56: HME_EXECUTEQUERYStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_EXECUTEQUERY
Opcode: Stop

Event ID 57: HME_BROWSEStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_BROWSE
Opcode: Start

Event ID 58: HME_BROWSEStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_BROWSE
Opcode: Stop

Event ID 59: LEGACY_EVENTPDA_DEVICE_DETECTED

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LEGACY_EVENT
Opcode: PDA_DEVICE_DETECTED

Event ID 60: APP_LAUNCHStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: APP_LAUNCH
Opcode: Start

Event ID 61: APP_LAUNCHStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: APP_LAUNCH
Opcode: Stop

Event ID 62: PARSE_CMD_LINEStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PARSE_CMD_LINE
Opcode: Start

Fields #

Name	Description
`CmdLine` UnicodeString

Event ID 63: PARSE_CMD_LINEStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PARSE_CMD_LINE
Opcode: Stop

Fields #

Name	Description
`CmdLine` UnicodeString

Event ID 64: PROCESS_CMD_LINEStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PROCESS_CMD_LINE
Opcode: Start

Event ID 65: PROCESS_CMD_LINEStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PROCESS_CMD_LINE
Opcode: Stop

Event ID 66: APPLY_SKINStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: APPLY_SKIN
Opcode: Start

Fields #

Name	Description
`SkinPath` UnicodeString

Event ID 67: APPLY_SKINStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: APPLY_SKIN
Opcode: Stop

Fields #

Name	Description
`SkinPath` UnicodeString

Event ID 68: RESTORE_FROM_SKINStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: RESTORE_FROM_SKIN
Opcode: Start

Event ID 69: RESTORE_FROM_SKINStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: RESTORE_FROM_SKIN
Opcode: Stop

Event ID 70: FULLSCREENStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: FULLSCREEN
Opcode: Start

Event ID 71: FULLSCREENStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: FULLSCREEN
Opcode: Stop

Event ID 72: TASKBARStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: TASKBAR
Opcode: Start

Event ID 73: TASKBARStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: TASKBAR
Opcode: Stop

Event ID 74: MODE_SWITCHER

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: MODE_SWITCHER

Fields #

Name	Description
`ModeSwitcherOption` UInt32

Event ID 75: DSHOWGRAPH_OPEN

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: DSHOWGRAPH_OPEN

Event ID 76: FSDKGRAPH_OPEN

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: FSDKGRAPH_OPEN

Event ID 77: MFGRAPH_OPEN

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: MFGRAPH_OPEN

Event ID 78: CDBURNStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: CDBURN
Opcode: Start

Event ID 79: CDBURNStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: CDBURN
Opcode: Stop

Event ID 80: CDBURNCheckpoint_1

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: CDBURN
Opcode: Checkpoint_1

Event ID 81: CDBURNCheckpoint_2

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: CDBURN
Opcode: Checkpoint_2

Event ID 82: PLAYBACKStateChange

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYBACK
Opcode: StateChange

Fields #

Name	Description
`EventType` UnicodeString
`NewState` UInt32

Event ID 83: FULLSCREENCLOSEBUTTON_CLICK

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: FULLSCREEN
Opcode: CLOSEBUTTON_CLICK

Event ID 84: DDPRESET_NORMAL

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: DDPRESET_NORMAL

Fields #

Name	Description
`HRESULT` UInt32

Event ID 85: DDPRESET_LAPTOP

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: DDPRESET_LAPTOP

Fields #

Name	Description
`HRESULT` UInt32

Event ID 86: DDPRESET_THEATER

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: DDPRESET_THEATER

Fields #

Name	Description
`HRESULT` UInt32

Event ID 87: DISCMEDIACHANGEAdded

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: DISCMEDIACHANGE
Opcode: Added

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 88: DISCMEDIACHANGERemoved

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: DISCMEDIACHANGE
Opcode: Removed

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 89: DISCMEDIACHANGE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: DISCMEDIACHANGE

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 90: FULLSCREENEXITBUTTON_CLICK

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: FULLSCREEN
Opcode: EXITBUTTON_CLICK

Event ID 91: MAINFRAME_DESTROYStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: MAINFRAME_DESTROY
Opcode: Start

Event ID 92: MAINFRAME_DESTROYStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: MAINFRAME_DESTROY
Opcode: Stop

Event ID 93: FULLSCREEN_LOADINGUIStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: FULLSCREEN_LOADINGUI
Opcode: Start

Event ID 94: FULLSCREEN_LOADINGUIStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: FULLSCREEN_LOADINGUI
Opcode: Stop

Event ID 95: FULLSCREEN_LOADINGUI_FADEStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: FULLSCREEN_LOADINGUI_FADE
Opcode: Start

Event ID 96: FULLSCREEN_LOADINGUI_FADEStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: FULLSCREEN_LOADINGUI_FADE
Opcode: Stop

Event ID 97: DVDGRAPH

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: DVDGRAPH

Fields #

Name	Description
`DeviceName` UnicodeString
`PnPID` UnicodeString

Event ID 99: GROVELER

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: GROVELER

Fields #

Name	Description
`FilesFound` UInt32
`FilesAdded` UInt32
`FilesSkipped` UInt32
`DirectoriesFound` UInt32
`DirectoriesRemoved` UInt32
`Levels` UInt32
`ElapsedTime` UInt32

Event ID 100: GROVELER100

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 101: GROVELER101

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 102: GROVELER102

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 103: GROVELER103

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 104: GROVELER104

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 105: GROVELERStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: GROVELER
Opcode: Start

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 106: GROVELERStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: GROVELER
Opcode: Stop

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 107: GROVELER107

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 108: GROVELER108

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 109: GROVELER109

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: GROVELER

Event ID 110: GROVELER110

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: GROVELER

Fields #

Name	Description
`Name` UnicodeString
`HRESULT` UInt32

Event ID 149: METADATAPLUGIN

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: METADATAPLUGIN

Fields #

Name	Description
`Name` UnicodeString
`HRESULT` UInt32

Event ID 150: METADATAPLUGIN150

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: METADATAPLUGIN

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 151: METADATAPLUGIN151

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: METADATAPLUGIN

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString
`Index` UInt32

Event ID 152: METADATAPLUGIN152

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: METADATAPLUGIN

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString
`Index` UInt32

Event ID 153: METADATAPLUGIN153

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: METADATAPLUGIN

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 154: METADATAPLUGIN154

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: METADATAPLUGIN

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 155: RAMCACHE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: RAMCACHE

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString
`Index` UInt32

Event ID 156: RAMCACHE156

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: RAMCACHE

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString
`Index` UInt32

Event ID 157: RAMCACHEStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: RAMCACHE
Opcode: Start

Fields #

Name	Description
`Value` UInt32

Event ID 158: RAMCACHEStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: RAMCACHE
Opcode: Stop

Fields #

Name	Description
`Value` UInt32

Event ID 200: METADATALIFECYCLE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: METADATALIFECYCLE

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 201: METADATADOWNLOADStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: METADATADOWNLOAD
Opcode: Start

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 202: METADATADOWNLOADStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: METADATADOWNLOAD
Opcode: Stop

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 205: MLS

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: MLS

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 206: MLS206

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: MLS

Fields #

Name	Description
`Name` UnicodeString
`HRESULT` UInt32

Event ID 207: MLS207

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: MLS

Fields #

Name	Description
`SourceFile` UnicodeString

Event ID 220: PLAYLISTStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYLIST
Opcode: Start

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 221: PLAYLISTStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYLIST
Opcode: Stop

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 222: PLAYHISTORYCLICK

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYHISTORYCLICK

Event ID 250: RADIO

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: RADIO

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 251: RADIORemoved

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: RADIO
Opcode: Removed

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 252: RADIOAdded

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: RADIO
Opcode: Added

Fields #

Name	Description
`Name` UnicodeString
`Value` UnicodeString

Event ID 280: THUMBNAIL_TOOLBAR_ADDStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: THUMBNAIL_TOOLBAR_ADD
Opcode: Start

Fields #

Name	Description
`ToolbarID` UInt32

Event ID 281: THUMBNAIL_TOOLBAR_ADDStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: THUMBNAIL_TOOLBAR_ADD
Opcode: Stop

Fields #

Name	Description
`ToolbarID` UInt32

Event ID 282: THUMBNAIL_TOOLBAR_BUTTON_CLICKEDStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: THUMBNAIL_TOOLBAR_BUTTON_CLICKED
Opcode: Start

Fields #

Name	Description
`ButtonID` UInt32

Event ID 283: THUMBNAIL_TOOLBAR_BUTTON_CLICKEDStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: THUMBNAIL_TOOLBAR_BUTTON_CLICKED
Opcode: Stop

Fields #

Name	Description
`ButtonID` UInt32

Event ID 284: THUMBNAIL_TOOLTIP_CHANGED

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: THUMBNAIL_TOOLTIP_CHANGED

Fields #

Name	Description
`Tooltip` UnicodeString

Event ID 285: THUMBNAIL_BITMAPS_INVALIDATED

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: THUMBNAIL_BITMAPS_INVALIDATED

Event ID 286: THUMBNAIL_BITMAP_UPDATEStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: THUMBNAIL_BITMAP_UPDATE
Opcode: Start

Event ID 287: THUMBNAIL_BITMAP_UPDATEStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: THUMBNAIL_BITMAP_UPDATE
Opcode: Stop

Event ID 288: THUMBNAIL_LIVEPREVIEWBITMAP_UPDATEStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: THUMBNAIL_LIVEPREVIEWBITMAP_UPDATE
Opcode: Start

Event ID 289: THUMBNAIL_LIVEPREVIEWBITMAP_UPDATEStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: THUMBNAIL_LIVEPREVIEWBITMAP_UPDATE
Opcode: Stop

Event ID 300: SKINEVENT

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: SKINEVENT

Fields #

Name	Description
`Category` UnicodeString
`Skinformation` UnicodeString

Event ID 301: HOVERTRANSPORTSStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HOVERTRANSPORTS
Opcode: Start

Event ID 302: HOVERTRANSPORTSStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HOVERTRANSPORTS
Opcode: Stop

Event ID 303: SKINPAINTStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: SKINPAINT
Opcode: Start

Event ID 304: SKINPAINTStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: SKINPAINT
Opcode: Stop

Event ID 305: BASKETStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: BASKET
Opcode: Start

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UInt32

Event ID 306: BASKETStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: BASKET
Opcode: Stop

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UInt32

Event ID 307: NAVIGATION

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: NAVIGATION

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 308: LISTVIEW

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LISTVIEW

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 309: LISTVIEWStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LISTVIEW
Opcode: Start

Fields #

Name	Description
`Int1` UInt32
`Int2` UInt32

Event ID 310: LISTVIEWStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LISTVIEW
Opcode: Stop

Fields #

Name	Description
`Int1` UInt32
`Int2` UInt32

Event ID 311: TREEVIEW

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: TREEVIEW

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 312: PLAYHISTORY

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYHISTORY

Fields #

Name	Description
`Int1` UInt32
`Int2` UInt32

Event ID 313: LIBRARYUX

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LIBRARYUX

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UInt32
`Value3` UInt32

Event ID 314: LIBRARYUX314

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: LIBRARYUX

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString
`Value3` UnicodeString

Event ID 315: USAGELOGGER

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: USAGELOGGER

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString
`Value3` UnicodeString

Event ID 316: WORDWHEELStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WORDWHEEL
Opcode: Start

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UnicodeString

Event ID 317: WORDWHEELStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WORDWHEEL
Opcode: Stop

Fields #

Name	Description
`Value1` UnicodeString
`Value2` UInt32

Event ID 318: WORDWHEELStop318

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WORDWHEEL
Opcode: Stop

Event ID 323: HME_SERVER_CONTAINER_UPDATE_IDSStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_SERVER_CONTAINER_UPDATE_IDS
Opcode: Start

Event ID 324: HME_SERVER_CONTAINER_UPDATE_IDSStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_SERVER_CONTAINER_UPDATE_IDS
Opcode: Stop

Event ID 356: HME_SERVER_EXECUTE_QUERYStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_SERVER_EXECUTE_QUERY
Opcode: Start

Fields #

Name	Description
`ContainerID` UnicodeString
`Query` UnicodeString

Event ID 357: HME_SERVER_EXECUTE_QUERYStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_SERVER_EXECUTE_QUERY
Opcode: Stop

Fields #

Name	Description
`ContainerID` UnicodeString
`Query` UnicodeString
`HRESULT` UInt32

Event ID 360: HME_SERVER_UPDATEOBJECTStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_SERVER_UPDATEOBJECT
Opcode: Start

Fields #

Name	Description
`DeviceID` UnicodeString
`ObjectID` UnicodeString

Event ID 361: HME_SERVER_UPDATEOBJECTStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_SERVER_UPDATEOBJECT
Opcode: Stop

Fields #

Name	Description
`DeviceID` UnicodeString
`ObjectID` UnicodeString
`HRESULT` UInt32

Event ID 362: HME_CLIENT_UPDATE_METADATAStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_CLIENT_UPDATE_METADATA
Opcode: Start

Fields #

Name	Description
`ID` UnicodeString
`Item` UInt32
`Atom` UInt32

Event ID 363: HME_CLIENT_UPDATE_METADATAStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_CLIENT_UPDATE_METADATA
Opcode: Stop

Fields #

Name	Description
`ID` UnicodeString
`Item` UInt32
`Atom` UInt32
`HRESULT` UInt32

Event ID 364: HME_SERVER_ONLINE_OFFLINE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_SERVER_ONLINE_OFFLINE

Fields #

Name	Description
`ServerUDN` UnicodeString
`Offline` Boolean

Event ID 365: HME_SERVER_MAGIC_PACKET_SENT

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_SERVER_MAGIC_PACKET_SENT

Fields #

Name	Description
`ID` UnicodeString

Event ID 366: HME_SERVER_WAKEUP_FAILED

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_SERVER_WAKEUP_FAILED

Fields #

Name	Description
`ID` UnicodeString

Event ID 370: HME_EnableSharingStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_EnableSharing
Opcode: Start

Fields #

Name	Description
`IWMMediaLibrary` Pointer
`EnableSharing` Boolean
`UpdateACLs` Boolean
`HRESULT` UInt32

Event ID 371: HME_EnableSharingStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_EnableSharing
Opcode: Stop

Fields #

Name	Description
`IWMMediaLibrary` Pointer
`EnableSharing` Boolean
`UpdateACLs` Boolean
`HRESULT` UInt32

Event ID 372: HME_UPnPDiscoveryBeginStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_UPnPDiscoveryBegin
Opcode: Start

Fields #

Name	Description
`IgnoreUPnPDiscovery` Boolean
`HRESULT` UInt32

Event ID 373: HME_UPnPDiscoveryBeginStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_UPnPDiscoveryBegin
Opcode: Stop

Fields #

Name	Description
`IgnoreUPnPDiscovery` Boolean
`HRESULT` UInt32

Event ID 374: HME_UPnPDiscoveryInitialComplete

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_UPnPDiscoveryInitialComplete

Fields #

Name	Description
`HRESULT` UInt32

Event ID 375: HME_UPnPDiscoveryEnd

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_UPnPDiscoveryEnd

Fields #

Name	Description
`HRESULT` UInt32

Event ID 376: HME_UPnPDeviceAddedCallbackStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_UPnPDeviceAddedCallback
Opcode: Start

Fields #

Name	Description
`IUPnPDevice` Pointer
`UDN` UnicodeString
`FriendlyName` UnicodeString
`HRESULT` UInt32

Event ID 377: HME_UPnPDeviceAddedCallback

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_UPnPDeviceAddedCallback

Fields #

Name	Description
`IUPnPDevice` Pointer
`UDN` UnicodeString
`FriendlyName` UnicodeString
`HRESULT` UInt32

Event ID 378: HME_UPnPDeviceAddedCallback378

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_UPnPDeviceAddedCallback

Fields #

Name	Description
`IUPnPDevice` Pointer
`UDN` UnicodeString
`FriendlyName` UnicodeString
`HRESULT` UInt32

Event ID 379: HME_UPnPDeviceAddedCallbackStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_UPnPDeviceAddedCallback
Opcode: Stop

Fields #

Name	Description
`IUPnPDevice` Pointer
`UDN` UnicodeString
`FriendlyName` UnicodeString
`HRESULT` UInt32

Event ID 380: HME_UPnPDeviceRemovedCallbackStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_UPnPDeviceRemovedCallback
Opcode: Start

Fields #

Name	Description
`UDN` UnicodeString
`HRESULT` UInt32

Event ID 381: HME_UPnPDeviceRemovedCallback

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_UPnPDeviceRemovedCallback

Fields #

Name	Description
`UDN` UnicodeString
`IHMEService` Pointer

Event ID 382: HME_UPnPDeviceRemovedCallbackStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_UPnPDeviceRemovedCallback
Opcode: Stop

Fields #

Name	Description
`UDN` UnicodeString
`HRESULT` UInt32

Event ID 383: HME_InitCDSThreadStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_InitCDSThread
Opcode: Start

Fields #

Name	Description
`UDN` UnicodeString
`IUPnPDevice` Pointer
`HRESULT` UInt32

Event ID 384: HME_InitCDSThreadStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_InitCDSThread
Opcode: Stop

Fields #

Name	Description
`UDN` UnicodeString
`IUPnPDevice` Pointer
`HRESULT` UInt32

Event ID 385: HME_InitCDSStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_InitCDS
Opcode: Start

Fields #

Name	Description
`UDN` UnicodeString
`IUPnPDevice` Pointer

Event ID 386: HME_InitCDSStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_InitCDS
Opcode: Stop

Fields #

Name	Description
`UDN` UnicodeString
`IUPnPDevice` Pointer
`IHMEService` Pointer
`HRESULT` UInt32

Event ID 389: HME_ServiceAddedStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_ServiceAdded
Opcode: Start

Fields #

Name	Description
`IHMEService` Pointer
`HRESULT` UInt32

Event ID 390: HME_ServiceAdded

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_ServiceAdded

Fields #

Name	Description
`IHMEService` Pointer
`UDN` UnicodeString

Event ID 391: HME_ServiceAddedStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_ServiceAdded
Opcode: Stop

Fields #

Name	Description
`IHMEService` Pointer
`HRESULT` UInt32

Event ID 392: HME_CDSUPnPInitializeStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_CDSUPnPInitialize
Opcode: Start

Fields #

Name	Description
`IUPnPDevice` Pointer

Event ID 393: HME_CDSUPnPInitializeStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_CDSUPnPInitialize
Opcode: Stop

Fields #

Name	Description
`IUPnPDevice` Pointer
`UDN` UnicodeString
`FriendlyName` UnicodeString
`CDSVersion` UInt32
`IsSearchable` Boolean
`SupportsRME` Boolean
`SupportsWakeOnLAN` Boolean
`IHMEProvider` Pointer
`HRESULT` UInt32

Event ID 394: HME_ProviderAddToRAMCacheStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_ProviderAddToRAMCache
Opcode: Start

Fields #

Name	Description
`CHMEProvider` Pointer
`IHMECDS` Pointer
`UDN` UnicodeString
`RAMCacheId` UInt32
`IsAuthorized` Boolean
`FireEvent` Boolean
`HRESULT` UInt32

Event ID 395: HME_ProviderAddToRAMCacheStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_ProviderAddToRAMCache
Opcode: Stop

Fields #

Name	Description
`CHMEProvider` Pointer
`IHMECDS` Pointer
`UDN` UnicodeString
`RAMCacheId` UInt32
`IsAuthorized` Boolean
`FireEvent` Boolean
`HRESULT` UInt32

Event ID 396: HME_ProviderShutdownStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_ProviderShutdown
Opcode: Start

Fields #

Name	Description
`CHMEProvider` Pointer
`IHMECDS` Pointer
`UDN` UnicodeString
`RAMCacheId` UInt32
`IsAuthorized` Boolean
`IsZombie` Boolean
`FireEvent` Boolean

Event ID 397: HME_ProviderShutdownStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_ProviderShutdown
Opcode: Stop

Fields #

Name	Description
`CHMEProvider` Pointer
`IHMECDS` Pointer
`UDN` UnicodeString
`RAMCacheId` UInt32
`IsAuthorized` Boolean
`IsZombie` Boolean
`FireEvent` Boolean

Event ID 398: HME_ProviderUpdateMessage

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: HME_ProviderUpdateMessage

Fields #

Name	Description
`RAMCacheId` UInt32
`IsAdding` Boolean
`FireEvent` Boolean

Event ID 400: Transcode has started.

Provider: Microsoft-Windows-WMP
Channel: WMPSyncEngine
Task: WMPSyncTranscodeManager
Opcode: Start

Description

Transcode has started. Source file: SourcePath, Target File: TargetPath.

Message #

Transcode has started.  Source file: %1, Target File: %2

Fields #

Name	Description
`SourcePath` UnicodeString
`TargetPath` UnicodeString

Event ID 401: Transcode has rolled over to using the dshow source.

Provider: Microsoft-Windows-WMP
Channel: WMPSyncEngine
Task: WMPSyncTranscodeManager
Opcode: ThetranscodemanagerhasrolledovertotheDShowSource

Description

Transcode has rolled over to using the dshow source. Source file: SourcePath, Target file: TargetPath.

Message #

Transcode has rolled over to using the dshow source.  Source file: %1, Target file: %2

Fields #

Name	Description
`SourcePath` UnicodeString
`TargetPath` UnicodeString

Event ID 402: Transcode has rolled over to the WMEncode API.

Provider: Microsoft-Windows-WMP
Channel: WMPSyncEngine

Description

Transcode has rolled over to the WMEncode API. Source file: {SourcePath}; Target File: {TargetPath}.

Message #

Transcode has rolled over to the WMEncode API.  Source file: {SourcePath}; Target File: {TargetPath}

Fields #

Name	Description
`SourcePath`
`TargetPath`

Event ID 403: Transcode has completed.

Provider: Microsoft-Windows-WMP
Channel: WMPSyncEngine
Task: WMPSyncTranscodeManager
Opcode: Stop

Description

Transcode has completed. Source file: SourcePath, Target File: TargetPath, HRESULT HRESULT.

Message #

Transcode has completed.  Source file: %1, Target File: %2, HRESULT %3

Fields #

Name	Description
`SourcePath` UnicodeString
`TargetPath` UnicodeString
`HRESULT` UInt32

Event ID 404: Transcode matrix is using MP4 matrix

Provider: Microsoft-Windows-WMP
Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: UsingtheMP4transcodematrix

Description

Transcode matrix is using MP4 matrix.

Message #

Transcode matrix is using MP4 matrix

Event ID 405: Transcode matrix is using ASF matrix

Provider: Microsoft-Windows-WMP
Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: UsingtheASFtranscodematrix

Description

Transcode matrix is using ASF matrix.

Message #

Transcode matrix is using ASF matrix

Event ID 406: IsTranscodeNeeded for source file SourceFile (DRM flag: IsDRM) has started.

Provider: Microsoft-Windows-WMP
Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: Start

Description

IsTranscodeNeeded for source file SourceFile (DRM flag: IsDRM) has started.

Message #

IsTranscodeNeeded for source file %1 (DRM flag: %2) has started.

Fields #

Name	Description
`SourceFile` UnicodeString
`IsDRM` Boolean

Event ID 407: IsTranscodeNeeded for source file SourceFile has stopped.

Provider: Microsoft-Windows-WMP
Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: Stop

Description

IsTranscodeNeeded for source file SourceFile has stopped. HRESULT: HRESULT.

Message #

IsTranscodeNeeded for source file %1 has stopped.  HRESULT: %2

Fields #

Name	Description
`SourceFile` UnicodeString
`HRESULT` UInt32

Event ID 408: GetTranscodeProfile for source file SourceFile has started.

Provider: Microsoft-Windows-WMP
Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: Start

Description

GetTranscodeProfile for source file SourceFile has started.

Message #

GetTranscodeProfile for source file %1 has started

Fields #

Name	Description
`SourceFile` UnicodeString

Event ID 409: GetTranscodeProfile for source file SourceFile has stopped.

Provider: Microsoft-Windows-WMP
Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: Stop

Description

GetTranscodeProfile for source file SourceFile has stopped. HRESULT: HRESULT.

Message #

GetTranscodeProfile for source file %1 has stopped.  HRESULT: %2

Fields #

Name	Description
`SourceFile` UnicodeString
`HRESULT` UInt32

Event ID 410: Sync engine is attempting to acquire a license for file SourceFile.

Provider: Microsoft-Windows-WMP
Channel: WMPSyncEngine
Task: WMPSyncLicenseAcquisition
Opcode: Start

Description

Sync engine is attempting to acquire a license for file SourceFile.

Message #

Sync engine is attempting to acquire a license for file %1

Fields #

Name	Description
`SourceFile` UnicodeString

Event ID 411: Sync engine has finished attempt to acquire license for file SourceFile.

Provider: Microsoft-Windows-WMP
Channel: WMPSyncEngine
Task: WMPSyncLicenseAcquisition
Opcode: Stop

Description

Sync engine has finished attempt to acquire license for file SourceFile. HRESULT: HRESULT.

Message #

Sync engine has finished attempt to acquire license for file %1.  HRESULT: %2

Fields #

Name	Description
`SourceFile` UnicodeString
`HRESULT` UInt32

Event ID 412: PLAYTOMENU_ENUMERATIONStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYTOMENU_ENUMERATION
Opcode: Start

Event ID 413: PLAYTOMENU_ENUMERATIONStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYTOMENU_ENUMERATION
Opcode: Stop

Fields #

Name	Description
`numberofDMRsFound` UInt32
`result` UInt32
`failureReason` UInt32

Event ID 414: PLAYTOMENU_OPERATIONStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYTOMENU_OPERATION
Opcode: Start

Event ID 415: PLAYTOMENU_OPERATION

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYTOMENU_OPERATION

Fields #

Name	Description
`UDN` UnicodeString
`result` UInt32

Event ID 416: PLAYTOMENU_OPERATIONStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYTOMENU_OPERATION
Opcode: Stop

Fields #

Name	Description
`UDN` UnicodeString
`result` UInt32
`failureReason` UInt32

Event ID 417: WMPDMR_AVTRANSPORT_ACTIONSStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 418: WMPDMR_AVTRANSPORT_ACTIONSStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 419: WMPDMR_AVTRANSPORT_ACTIONSStart419

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Fields #

Name	Description
`URI` UnicodeString
`URIMetadata` UnicodeString

Event ID 420: WMPDMR_AVTRANSPORT_ACTIONSStop420

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 425: STREAMING_MENU_ACTIONSStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: STREAMING_MENU_ACTIONS
Opcode: Start

Event ID 426: STREAMING_MENU_ACTIONSStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: STREAMING_MENU_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 427: CONFIGURE_STREAMING_MENU_ACTIONStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: CONFIGURE_STREAMING_MENU_ACTION
Opcode: Start

Event ID 428: CONFIGURE_STREAMING_MENU_ACTIONStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: CONFIGURE_STREAMING_MENU_ACTION
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 429: RECEIVE_MEDIA_MENU_ACTIONStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: RECEIVE_MEDIA_MENU_ACTION
Opcode: Start

Event ID 430: RECEIVE_MEDIA_MENU_ACTIONStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: RECEIVE_MEDIA_MENU_ACTION
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 433: STREAMING_MENU_RENDER_ACTIONStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: STREAMING_MENU_RENDER_ACTION
Opcode: Start

Event ID 434: STREAMING_MENU_RENDER_ACTIONStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: STREAMING_MENU_RENDER_ACTION
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 436: STREAMING_MENUITEM_RECEIVEMEDIA_CHECKSTATE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: STREAMING_MENUITEM_RECEIVEMEDIA_CHECKSTATE

Fields #

Name	Description
`IsChecked` Boolean

Event ID 437: STREAMING_MENUITEM_AUTOALLOWDEVICES_CHECKSTATE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: STREAMING_MENUITEM_AUTOALLOWDEVICES_CHECKSTATE

Fields #

Name	Description
`IsChecked` Boolean

Event ID 438: ALLOW_ALL_DEVICES_MENU_ACTIONStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: ALLOW_ALL_DEVICES_MENU_ACTION
Opcode: Start

Event ID 439: ALLOW_ALL_DEVICES_MENU_ACTIONStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: ALLOW_ALL_DEVICES_MENU_ACTION
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 440: CONFIGURE_STREAMING_HG_MENU_ACTIONStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: CONFIGURE_STREAMING_HG_MENU_ACTION
Opcode: Start

Event ID 441: CONFIGURE_STREAMING_HG_MENU_ACTIONStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: CONFIGURE_STREAMING_HG_MENU_ACTION
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 450: PLAYSINGLE_PH_RESOLVEStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYSINGLE_PH_RESOLVE
Opcode: Start

Fields #

Name	Description
`ProtocolHandler` Pointer
`URL` UnicodeString
`IInternetProtocolSink` Pointer

Event ID 451: PLAYSINGLE_PH_RESOLVE

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYSINGLE_PH_RESOLVE

Fields #

Name	Description
`ProtocolHandler` Pointer
`IInternetProtocolSink` Pointer
`UDN` UnicodeString
`ServiceID` UnicodeString
`ObjectID` UnicodeString
`IHMECDS` Pointer

Event ID 452: PLAYSINGLE_PH_RESOLVEStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYSINGLE_PH_RESOLVE
Opcode: Stop

Fields #

Name	Description
`ProtocolHandler` Pointer
`IInternetProtocolSink` Pointer
`UDN` UnicodeString
`ServiceID` UnicodeString
`ObjectID` UnicodeString
`HResult` UInt32

Event ID 453: PLAYSINGLE_PH_BROWSECDSStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYSINGLE_PH_BROWSECDS
Opcode: Start

Fields #

Name	Description
`ProtocolHandler` Pointer
`UDN` UnicodeString
`ObjectID` UnicodeString
`IHMECDS` Pointer
`HResult` UInt32

Event ID 454: PLAYSINGLE_PH_BROWSECDS

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYSINGLE_PH_BROWSECDS

Fields #

Name	Description
`ProtocolHandler` Pointer
`UDN` UnicodeString
`ObjectID` UnicodeString
`ASX` AnsiString
`HResult` UInt32

Event ID 455: PLAYSINGLE_PH_BROWSECDSStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYSINGLE_PH_BROWSECDS
Opcode: Stop

Fields #

Name	Description
`ProtocolHandler` Pointer
`UDN` UnicodeString
`ObjectID` UnicodeString
`IHMECDS` Pointer
`HResult` UInt32

Event ID 456: PLAYCONTAINER_CREATE_PLAYLISTStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYCONTAINER_CREATE_PLAYLIST
Opcode: Start

Fields #

Name	Description
`PlaylistMgr` Pointer
`URL` UnicodeString

Event ID 457: PLAYCONTAINER_CREATE_PLAYLISTStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: PLAYCONTAINER_CREATE_PLAYLIST
Opcode: Stop

Fields #

Name	Description
`PlaylistMgr` Pointer
`URL` UnicodeString
`IWMPPlaylist` Pointer
`HResult` UInt32

Event ID 460: WMPDMR_AVTRANSPORT_ACTIONSStart460

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 461: WMPDMR_AVTRANSPORT_ACTIONSStop461

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 462: WMPDMR_AVTRANSPORT_ACTIONSStart462

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Fields #

Name	Description
`instanceID` UInt64

Event ID 463: WMPDMR_AVTRANSPORT_ACTIONSStop463

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32
`instanceID` UInt64
`Track` Int64
`TrackDuration` UnicodeString
`MetaData` UnicodeString
`TrackURI` UnicodeString

Event ID 464: WMPDMR_AVTRANSPORT_ACTIONSStart464

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 465: WMPDMR_AVTRANSPORT_ACTIONSStop465

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 466: WMPDMR_AVTRANSPORT_ACTIONSStart466

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 467: WMPDMR_AVTRANSPORT_ACTIONSStop467

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 468: WMPDMR_AVTRANSPORT_ACTIONSStart468

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 469: WMPDMR_AVTRANSPORT_ACTIONSStop469

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 470: WMPDMR_AVTRANSPORT_ACTIONSStart470

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 471: WMPDMR_AVTRANSPORT_ACTIONSStop471

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 472: WMPDMR_AVTRANSPORT_ACTIONSStart472

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Start

Event ID 473: WMPDMR_AVTRANSPORT_ACTIONSStop473

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_AVTRANSPORT_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 474: WMPDMR_CONNECTION_MANAGER_ACTIONSStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_CONNECTION_MANAGER_ACTIONS
Opcode: Start

Event ID 475: WMPDMR_CONNECTION_MANAGER_ACTIONSStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_CONNECTION_MANAGER_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 476: WMPDMR_RENDERING_CONTROL_ACTIONSStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Start

Event ID 477: WMPDMR_RENDERING_CONTROL_ACTIONSStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 478: WMPDMR_RENDERING_CONTROL_ACTIONSStart478

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Start

Event ID 479: WMPDMR_RENDERING_CONTROL_ACTIONSStop479

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 480: WMPDMR_RENDERING_CONTROL_ACTIONSStart480

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Start

Event ID 481: WMPDMR_RENDERING_CONTROL_ACTIONSStop481

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 482: WMPDMR_RENDERING_CONTROL_ACTIONSStart482

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Start

Event ID 483: WMPDMR_RENDERING_CONTROL_ACTIONSStop483

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: WMPDMR_RENDERING_CONTROL_ACTIONS
Opcode: Stop

Fields #

Name	Description
`result` UInt32

Event ID 490: CDDVD_LAUNCHStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: CDDVD_LAUNCH
Opcode: Start

Fields #

Name	Description
`Key` UInt32

Event ID 491: CDDVD_LAUNCHLOCAL_PLAY_BEGIN

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: CDDVD_LAUNCH
Opcode: LOCAL_PLAY_BEGIN

Fields #

Name	Description
`Key` UInt32

Event ID 492: CDDVD_LAUNCHLOCAL_PLAY_BEGIN492

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: CDDVD_LAUNCH
Opcode: LOCAL_PLAY_BEGIN

Fields #

Name	Description
`Key` UInt32

Event ID 493: CDDVD_LAUNCHStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: CDDVD_LAUNCH
Opcode: Stop

Fields #

Name	Description
`Key` UInt32

Event ID 501: Transcode matrix is using MP3 matrix

Provider: Microsoft-Windows-WMP
Channel: WMPSyncEngine
Task: WMPSyncTranscodeMatrix
Opcode: UsingtheMP3transcodematrix

Description

Transcode matrix is using MP3 matrix.

Message #

Transcode matrix is using MP3 matrix

Event ID 1305: SKINCLOSEStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: SKINCLOSE
Opcode: Start

Event ID 1306: SKINCLOSEStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: SKINCLOSE
Opcode: Stop

Event ID 1307: APPCLOSEStart

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: APPCLOSE
Opcode: Start

Event ID 1308: APPCLOSEStop

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: APPCLOSE
Opcode: Stop

Event ID 1309: SKINPAINTStart1309

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: SKINPAINT
Opcode: Start

Event ID 1310: SKINPAINTStop1310

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: SKINPAINT
Opcode: Stop

Event ID 1311: SKINPAINTStart1311

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: SKINPAINT
Opcode: Start

Event ID 1312: SKINPAINTStop1312

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: SKINPAINT
Opcode: Stop

Event ID 1313: SKINPAINTStart1313

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: SKINPAINT
Opcode: Start

Event ID 1314: SKINPAINTStop1314

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: SKINPAINT
Opcode: Stop

Event ID 1615: CDGRAPH

Provider: Microsoft-Windows-WMP
Channel: Operational
Task: CDGRAPH

Fields #

Name	Description
`DeviceName` UnicodeString
`PnPID` UnicodeString

Provenance

Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.

ETW provider GUID f3f14ff3-7b80-4868-91d0-d77e497b025e

Defined in wmp.dll, which carries the event manifest.

Observed on:

WS2022-20348.4893, schema read from the registered manifest, binary version 12.0.20348.2849, captured 2026-06-02
Win11-26200.6584, schema read from the registered manifest, binary version 12.0.26100.5074, captured 2026-06-02

`j` / `k`	Scroll down / up
`d` / `u`	Half-page down / up
`gg` / `G`	Top / bottom
`h` / `l`	History back / forward
`f`	Follow link (`Shift` = new tab)
`/`	Focus search
`?`	Toggle this help
`↑` / `↓`	Navigate search results
`Enter`	Open highlighted result
`Esc`	Close results / dialog

`type:`	`events` / `rules` / `providers`
`vendor:`	`sigma` / `elastic` / `splunk` / `kusto` / `chronicle` (vendor name alone also works: `sigma:`, `kql:`, `secops:`…)
`tactic:`	TA-id, slug, or name: `credential_access`, `TA0006`
`technique:`	technique or sub-technique ID: `T1003`, `T1003.001` (alias `tech:`)
`severity:`	`critical` / `high` / `medium` / `low` / `informational` (alias `sev:`)
`risk_score`	Numeric comparison on the Elastic risk score (0 to 100): `risk_score>50`, `risk_score<=20`, `risk_score=99` (alias `risk`; Elastic rules only)
`stages:`	Rules with exactly N pipeline stages
`correlation:`	`single_event` / `sequence` / `alternatives` / `alternatives_cross_log` / `all_required` / `correlated`
`with:`	Co-occurrence event-id; stacks (`with:4624 with:4769`) to require all, while a comma list in one occurrence (`with:4624,4769`) is an either-or group. Implies multi-event
`like:`	Structural neighbors of a rule slug (equivalents + subsumption stricter / broader): `like:comsvcs_lsass_memory_dump-splunk-sysmon`
`groupby:`	Entity-grouping substring match against `group_by_keys`: `groupby:user`, `groupby:host`
`uses:`	Rules whose predicate tree touches the field (any kind, any value): `uses:CommandLine`
`excludes:`	Rules with top-level `not()` clauses on the field (FP whitelists): `excludes:ParentImage`
`field:` / `value:`	Predicate search; narrows rule cards to those with a matching leaf and drives the indicator tier. Unquoted = substring, wildcards allowed (`value:mimikatz`)
`indicator:`	Shorthand for `field:F value:V`: `indicator:Image=*\powershell.exe`
`kind:`	Filter by predicate kind. Narrows rule cards to those carrying a matching predicate leaf (`vendor:elastic kind:cidr_match`) and drives the indicator tier: `contains` / `starts_with` / `ends_with` / `regex` / `cidr` / `eq` / `in` … (operator aliases `op:`/`match:`)
`has:` / `no:`	`sample`, `field`, `notes`, `refs`, `trace`, `thirdparty`, `rule`, `pattern`, `timewindow`, `threshold`, `newterms`, `sigma`/`elastic`/`splunk`/`kusto`/`chronicle`
`-op:val`	Exclude matches; works on most operators but not `type:`/`like:`/`has:`/`no:` (use `no:<flag>` to exclude a rule flag): `tactic:execution -vendor:splunk`. Standalone `-kind:`/`-field:`/`-value:` drop every rule carrying a matching predicate leaf (`type:rules -kind:is_null`)
`field:"…"` / `value:"…"`	Quoted value = anchored exact match (also allows spaces): `value:"net user"`
`a,b`	Comma = OR inside one operator (`vendor:sigma,elastic`, `severity:high,critical`); repeating a facet merges the same way. `field:`/`value:` never split (literal commas)
`vendors:` / `stage:`	Singular and plural spellings fold to the canonical operator and value: `tactics:` = `tactic:`, `type:event` = `type:events`, `correlation:sequences` = `correlation:sequence`, `has:thresholds` = `has:threshold`
`"quoted phrase"`	Exact-match a multi-word phrase (free text)