srv2

Provenance

Defined in srv2.sys, the binary that emits these events.

• Win11-26200.6584, schema recovered from debug symbols, binary version 10.0.26100.6584, PDB signature 891D03FF2BA03B4AF50764DF992164351, captured 2026-06-02 — srv2 WPP/TMF statements (in the Win11-26200.6584 TMF pack) — TMF corpus provenance and drift model (Win11-26200.6584)

  srv2.sys was recovered from Microsoft's public symbol server. These are low-level developer trace messages whose internal identifiers Windows renumbers on every build, so a capture decodes correctly only against the exact binary it came from. Match the PDB signature above to the srv2.sys on your own host before decoding a captured trace.