Microsoft-Windows-DirectComposition
75 events across 1 channel
Event ID 1: RESOURCE_CREATION
#Fields #
| Name | Description |
|---|---|
channelHandle UInt32 | |
resourceHandle UInt32 | |
externalHandleAndChannel UInt64 | |
resourceType UInt32 | |
createShared Boolean | |
openShared Boolean | |
resourcePointer UInt64 |
Event ID 2: BEGIN_DRAWStart
#Fields #
| Name | Description |
|---|---|
channelHandle UInt32 | |
resourceType UInt32 | |
resourcePointer UInt64 | |
left Int32 | |
top Int32 | |
right Int32 | |
bottom Int32 |
Event ID 3: BEGIN_DRAWStop
#Event ID 4: END_DRAWStart
#Fields #
| Name | Description |
|---|---|
channelHandle UInt32 | |
resourceType UInt32 | |
resourcePointer UInt64 |
Event ID 5: END_DRAWStop
#Event ID 6: TRIMStart
#Fields #
| Name | Description |
|---|---|
channelHandle UInt32 | |
resourceType UInt32 | |
resourcePointer UInt64 |
Event ID 7: TRIMStop
#Event ID 8: RESIZEStart
#Fields #
| Name | Description |
|---|---|
channelHandle UInt32 | |
resourceType UInt32 | |
resourcePointer UInt64 |
Event ID 9: RESIZEStop
#Event ID 10: UPDATE_TOKENStart
#Fields #
| Name | Description |
|---|---|
channelHandle UInt32 | |
resourceType UInt32 | |
resourcePointer UInt64 |
Event ID 11: UPDATE_TOKENStop
#Event ID 12: SUSPEND_DRAWStart
#Fields #
| Name | Description |
|---|---|
channelHandle UInt32 | |
resourceType UInt32 | |
resourcePointer UInt64 |
Event ID 13: SUSPEND_DRAWStop
#Event ID 14: RESUME_DRAWStart
#Fields #
| Name | Description |
|---|---|
channelHandle UInt32 | |
resourceType UInt32 | |
resourcePointer UInt64 |
Event ID 15: RESUME_DRAWStop
#Event ID 16: ATLAS_ALLOCATE
#Fields #
| Name | Description |
|---|---|
Id UInt64 | |
Width UInt32 | |
Height UInt32 | |
BitDepth UInt32 | |
IsTexturingAtlas Boolean | |
ChannelHandle UInt32 | |
PixelFormat UInt32 |
Event ID 18: ATLAS_ENTRY_ALLOCATE
#Fields #
| Name | Description |
|---|---|
AtlasId UInt64 | |
X UInt32 | |
Y UInt32 | |
Width UInt32 | |
Height UInt32 | |
EntryId UInt64 |
Event ID 19: ATLAS_ENTRY_FREE
#Fields #
| Name | Description |
|---|---|
AtlasId UInt64 | |
X UInt32 | |
Y UInt32 | |
Width UInt32 | |
Height UInt32 | |
EntryId UInt64 |
Event ID 20: ATLAS_UTILIZATION
#Fields #
| Name | Description |
|---|---|
Id UInt64 | |
Width UInt32 | |
Height UInt32 | |
BitDepth UInt32 | |
PercentUsed Float |
Event ID 21: SCROLLStart
#Fields #
| Name | Description |
|---|---|
channelHandle UInt32 | |
resourceType UInt32 | |
resourcePointer UInt64 |
Event ID 22: SCROLLStop
#Event ID 25: DEVICE_COMMIT
#Fields #
| Name | Description |
|---|---|
DeviceId UInt64 | |
ChannelHandle UInt32 | |
LastCommittedBatchId UInt32 | |
LastConfirmedBatchId UInt32 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DirectComposition",
"guid": "{C44219D0-F344-11DF-A5E2-B307DFD72085}",
"event_source_name": "",
"event_id": 25,
"version": 0,
"level": 5,
"task": 17,
"opcode": 0,
"keywords": "0x0000000000000006",
"time_created": "2026-06-02T05:15:49.912+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 1648,
"thread_id": 1704
},
"channel": "ETW Trace",
"computer": "JD-DC01-2022",
"security": {
"user_id": ""
}
},
"event_data": {
"ChannelHandle": 4246923248,
"DeviceId": 1889737972112,
"LastCommittedBatchId": 16,
"LastConfirmedBatchId": 16
},
"message": "DEVICE_COMMIT"
}
Event ID 26: ATLAS_USE_INFO
#Fields #
| Name | Description |
|---|---|
Id UInt64 | |
Owner UInt64 | |
UseType UInt32 | |
XData Int32 | |
YData Int32 |
Event ID 29: ATLAS_ENTRY_REUSE
#Fields #
| Name | Description |
|---|---|
AtlasId UInt64 | |
X UInt32 | |
Y UInt32 | |
Width UInt32 | |
Height UInt32 | |
EntryId UInt64 |
Event ID 30: RESOURCE_RELEASE
#Fields #
| Name | Description |
|---|---|
channelHandle UInt32 | |
resourceHandle UInt32 | |
resourcePointer UInt64 |
Event ID 31: CREATE_CLUMP
#Fields #
| Name | Description |
|---|---|
clumpPointer UInt64 | |
virtualSurfacePointer UInt64 | |
left UInt32 | |
top UInt32 | |
right UInt32 | |
bottom UInt32 |
Event ID 37: VIRTUAL_SURFACE_COUNTERS
#Fields #
| Name | Description |
|---|---|
percentValidTiles UInt32 | |
pixelsPerClump UInt32 |
Event ID 38: CAP_ALLOCATION_STATS
#Fields #
| Name | Description |
|---|---|
ChannelHandle UInt32 | |
LastCommittedBatchId UInt32 | |
largeSurfacesTotalAllocated UInt64 | |
largeSurfacesInUseAllocated UInt64 | |
largeSurfacesInUseActual UInt64 | |
largeSurfacesPeakInUseActual UInt64 | |
largeSurfacesAllowed UInt64 | |
poolsTotalAllocated UInt64 | |
poolsInUseAllocated UInt64 | |
poolsInUseActual UInt64 | |
poolsPeakInUseActual UInt64 | |
poolsAllowed UInt64 | |
largeSurfacesPendingRelease UInt64 | |
poolsPendingRelease UInt64 | |
largeSurfacesMaxStructuralWaste UInt64 | |
poolsMaxStructuralWaste UInt64 |
Event ID 43: OFFER_RECLAIM43
#Fields #
| Name | Description |
|---|---|
Id UInt64 | |
Width UInt32 | |
Height UInt32 | |
PixelsDiscarded Boolean | |
SurfaceInvalid Boolean |
Event ID 44: CAP_MAXIMUM
#Fields #
| Name | Description |
|---|---|
Id UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DirectComposition",
"guid": "{C44219D0-F344-11DF-A5E2-B307DFD72085}",
"event_source_name": "",
"event_id": 44,
"version": 0,
"level": 5,
"task": 32,
"opcode": 1,
"keywords": "0x0000000000000006",
"time_created": "2026-06-02T05:15:49.912+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 1648,
"thread_id": 1704
},
"channel": "ETW Trace",
"computer": "JD-DC01-2022",
"security": {
"user_id": ""
}
},
"event_data": {
"Id": 4
},
"message": "CAP_MAXIMUM"
}
Event ID 45: CAP_MAXIMUM
#Fields #
| Name | Description |
|---|---|
Id UInt64 |
Example Event #
{
"system": {
"provider": "Microsoft-Windows-DirectComposition",
"guid": "{C44219D0-F344-11DF-A5E2-B307DFD72085}",
"event_source_name": "",
"event_id": 45,
"version": 0,
"level": 5,
"task": 32,
"opcode": 2,
"keywords": "0x0000000000000006",
"time_created": "2026-06-02T05:15:49.912+00:00",
"event_record_id": 0,
"correlation": {},
"execution": {
"process_id": 1648,
"thread_id": 1704
},
"channel": "ETW Trace",
"computer": "JD-DC01-2022",
"security": {
"user_id": ""
}
},
"event_data": {
"Id": 4
},
"message": "CAP_MAXIMUM"
}
Event ID 48: ALLOCATE_FROM_SHARED_MEMORY_SECTION
#Fields #
| Name | Description |
|---|---|
section UInt64 | |
allocationSize UInt32 | |
sectionSize UInt32 | |
heap Boolean |
Event ID 49: FREE_FROM_SHARED_MEMORY_SECTION
#Event ID 50: ANIMATION_SCENARIO_BEGIN
#Fields #
| Name | Description |
|---|---|
deviceId UInt64 | |
channelHandle UInt32 | |
version UInt16 | |
scenarioPriority UInt16 | |
flags UInt16 | |
qpcInitiate UInt64 | |
qpcInput UInt64 | |
msIntendedDuration UInt32 | |
scenarioGuid GUID | |
scenarioName UnicodeString | |
scenarioDetails UnicodeString |
Event ID 51: ANIMATION_SCENARIO_REFERENCE
#Fields #
| Name | Description |
|---|---|
deviceId UInt64 | |
channelHandle UInt32 | |
scenarioGuid GUID | |
uniqueKey UInt64 |
Event ID 52: ANIMATION_SCENARIO_UNREFERENCE
#Fields #
| Name | Description |
|---|---|
deviceId UInt64 | |
channelHandle UInt32 | |
scenarioGuid GUID | |
uniqueKey UInt64 |
Event ID 53: PRIMITIVE_GROUP_UPDATE
#Fields #
| Name | Description |
|---|---|
channelHandle UInt32 | |
resourceHandle UInt32 | |
flags UInt32 | |
batchCount UInt32 | |
totalPrimitiveCount UInt32 | |
boundsLeft Float | |
boundsTop Float | |
boundsRight Float | |
boundsBottom Float | |
singlePrimitiveInfoLength UInt16 | |
surfaceInfoLength UInt16 | |
surfaceInfo Binary | |
primitivesLength UInt16 | |
primitives Binary |
Event ID 54: ATLAS_RESIZE
#Fields #
| Name | Description |
|---|---|
TargetX UInt32 | |
TargetY UInt32 | |
MinX UInt32 | |
MinY UInt32 | |
MaxX UInt32 | |
MaxY UInt32 | |
RequestX UInt32 | |
RequestY UInt32 | |
ShrinkX UInt32 | |
ShrinkY UInt32 | |
GrowX UInt32 | |
GrowY UInt32 | |
AtlasX UInt32 | |
AtlasY UInt32 |
Event ID 55: VISUAL_SET_INTERACTION
#Fields #
| Name | Description |
|---|---|
Channel UInt32 | |
visualHandle UInt32 | |
interactionHandle UInt32 | |
visualAndChannelHandle UInt64 | |
interactionAndChannelHandle UInt64 |
Event ID 56: VISUAL_SET_INPUTSINK
#Fields #
| Name | Description |
|---|---|
visualAndChannelHandle UInt64 | |
inputSinkHandle Pointer |
Event ID 57: VISUAL_REDIRECT_MOUSE
#Fields #
| Name | Description |
|---|---|
Channel UInt32 | |
visualHandle UInt32 | |
visualAndChannelHandle UInt64 | |
windowHandle Pointer | |
mouseConfigMask UInt32 | |
mouseConfigValues UInt32 |
Event ID 58: INTERACTION_CONFIGURATION
#Fields #
| Name | Description |
|---|---|
Channel UInt32 | |
interactionHandle UInt32 | |
interactionAndChannelHandle UInt64 | |
propertyId UInt32 |
Event ID 59: INTERACTION_CAPTURE_POINTER
#Fields #
| Name | Description |
|---|---|
Channel UInt32 | |
interactionHandle UInt32 | |
interactionAndChannelHandle UInt64 | |
captureType UInt32 | |
pointerId UInt32 | |
pointerTimeStamp UInt64 |
Event ID 60: FLIP_CONSUME_PRESENTStart
#Event ID 62: FLIP_CONSUME_PRESENT_CALLOUTStart
#Event ID 64: FLIP_PRODUCE_PRESENTStart
#Event ID 66: ANIMATION_ENDED
#Fields #
| Name | Description |
|---|---|
eventType UInt32 | |
resourceHandle UInt32 | |
callbackId UInt32 |
Event ID 67: REGISTERANIMATIONTARGET
#Fields #
| Name | Description |
|---|---|
objectHandle UInt32 | |
propertyHandle UInt32 | |
animatorResourceHandle UInt32 | |
animatorCallbackId UInt32 |
Event ID 68: EXPRESSIONANIMATOR_INIT
#Fields #
| Name | Description |
|---|---|
expressionAnimatorInstance UInt64 | |
nodesBuffer UInt64 | |
cacheBuffer UInt64 | |
cacheBufferParam UInt64 |
Event ID 69: EXPRESSIONANIMATOR_RELEASE_RESOURCES
#Fields #
| Name | Description |
|---|---|
expressionAnimatorInstance UInt64 | |
nodesBuffer UInt64 | |
cacheBuffer UInt64 |
Event ID 72: DELEGATEDINKTRAIL_COOKIEPUSHED
#Fields #
| Name | Description |
|---|---|
CookieTracker Pointer | |
CookieValue UInt32 |
Event ID 73: DELEGATEDINKTRAIL_REMOVETRAILPOINTS
#Fields #
| Name | Description |
|---|---|
InkTrail Pointer | |
GenerationId UInt32 | |
LookupId UInt32 |
Event ID 74: DELEGATEDINKTRAIL_STARTNEWTRAIL
#Fields #
| Name | Description |
|---|---|
InkTrail Pointer | |
PrevGenerationId UInt32 | |
Color_R Float | |
Color_G Float | |
Color_B Float | |
Color_A Float |
Event ID 75: WINCOMP_EFFECT_CREATE
#Fields #
| Name | Description |
|---|---|
channelHandle UInt32 | |
resourceHandle UInt32 | |
Graph AnsiString |
Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID {C44219D0-F344-11DF-A5E2-B307DFD72085}
Defined in dcomp.dll, which carries the event manifest.
Observed on:
- WS2022-20348.4893 · sample captured from a live trace · binary version 10.0.20348.4647 · captured 2026-06-02
- WS2022-20348.4893 · schema read from the registered manifest · binary version 10.0.20348.4647 · captured 2026-06-02
- Win11-26200.6584 · schema read from the registered manifest · binary version 10.0.26100.5074 · captured 2026-06-02
Downloads
- Microsoft-Windows-DirectComposition registered manifest XML (WS2022-20348.4893) manifest-xml
- Microsoft-Windows-DirectComposition registered manifest XML (Win11-26200.6584) manifest-xml