Microsoft-Windows-MCCS-NetworkHelper
46 events across 1 channel
Event ID 1: Error: HRESULT: Error_HRESULT Location: Location Line Number: Line_Number.
#Event ID 2: Error Propagated: HRESULT: Error_Propagated_HRESULT Location: Location Line Number: Line_Number.
#Event ID 101: NetworkHelper::HttpTransport: Callback error: Handle: NetworkHelperHttpTransport_Callback_error_Handle Error: Error.
#Event ID 102: NetworkHelper::HttpTransport: Request Failure: Handle: NetworkHelperHttpTransport_Request_Failure_Handle Error: Error.
#Event ID 103: NetworkHelper::HttpTransport: Wait Failed on Closing Handle: P1_UInt32 Wait: P2_UInt32 Error: P3_UInt32.
#Event ID 104: NetworkHelper::HttpTransport: Set Active error: Handle: P1_UInt32 Error: P2_UInt32.
#Event ID 105: NetworkHelper::HttpTransport: Set Dormand error: Handle: P1_UInt32 Error: P2_UInt32.
#Event ID 106: NetworkHelper::HttpTransport: Set completion event error: Handle: P1_UInt32 Error: P2_UInt32.
#Event ID 107: NetworkHelper::HttpTransport: Wait on async request error: Handle: P1_UInt32 Wait: P2_UInt32 Error: P3_UInt32.
#Event ID 109: NetworkHelper::HttpTransport: Http Status error: Handle: P1_UInt32 Error: P2_UInt32.
#Event ID 110: NetworkHelper::HttpTransport: CmSetRequirement(Error) Failure: Handle: P1_String Error: P2_UInt32.
#Event ID 111: NetworkHelper::CrackUrl Failure.
#Event ID 201: Set PDC Active:Set_PDC_Active, invalid CCT state:invalid_CCT_state.
#Event ID 202: Triggering PDC for sender: P1_String, Activate: P2_Boolean, Task: P3_String, ActivationHandle: P4_Handle.
#Event ID 203: Triggered CCT for sender P1_String.
#Event ID 205: CCT failed, possibly because of VPN.
#Description
CCT failed, possibly because of VPN.
Message #
Event ID 206: Released CCT for sender P1_String; Attained CCT P2_Boolean.
#Event ID 207: Invalid CCT state: Invalid_CCT_state.
#Event ID 208: CCT failed, number of AOAC connection limitation reached.
#Description
CCT failed, number of AOAC connection limitation reached.
Message #
Event ID 209: PDC not renewed due to lack of progress, allowing low power state.
#Event ID 4005: Http: Http: WINHTTP_CALLBACK_STATUS_Prop_ptr.
#Event ID 4006: Http: Http: WINHTTP_CALLBACK_STATUS_Prop_ptr: Bytes received:Prop_ansi.
#Event ID 4007: Http: Http: WINHTTP_CALLBACK_STATUS_Prop_ptr: Socket: Prop_ansi.
#Event ID 4008: Http: Http: WINHTTP_CALLBACK_STATUS_Prop_ptr: Status: Prop_ansi.
#Event ID 4009: Http: Http: WINHTTP_CALLBACK_STATUS_Prop_ptr: Info: Prop_ansi.
#Event ID 4010: Http: Http: Unknown status: Unknown_status.
#Event ID 4020: Http: Setting threshold to P1_Int32.
#Event ID 4021: Http: Attributing Http Session to ProductId = P1_String.
#Event ID 4022: Http: Set WINHTTP_OPTION_SECONDARY_APP_META_DATA failed.
#Event ID 4023: Http: Http: WinHttpCloseHandle.
#Event ID 4024: Http: WFSO timed out waiting on m_hHandleClosingEvent.
#Description
Http: WFSO timed out waiting on m_hHandleClosingEvent. Waiting again...
Message #
Event ID 4025: Http: Http:Prop_string1.
#Event ID 4030: Http: Http: New request handle.
#Event ID 4031: Http: Ignoring status update on failed request
#Description
Http: Ignoring status update on failed request.
Message #
Event ID 4032: Http: Total bytes received: Http_Total_bytes_received.
#Event ID 4033: Http: ResponseContentLength(Prop_int1) !
#Event ID 4034: Http: Content size (Prop_int1) exceeded threshold (Prop_int2).
#Event ID 4040: Http: Prop_ptr: HTTP_QUERY_Prop_ansi: Prop_int.
#Event ID 4041: Http: Http: HTTP_QUERY_CONTENT_LENGTH is unknown.
#Event ID 4042: Http: Disallowing WiFi requests based on test hook value
#Description
Http: Disallowing WiFi requests based on test hook value.
Message #
Event ID 4043: Http: Http: Prop_ptr Prop_ansi bytes.
#Event ID 4044: Http: Http: Prop_ptr failed synchronously: Prop_ansi.
#Event ID 4045: Http: Http: Total Body Bytes sent: Total_Body_Bytes_sent.
#Event ID 4050: Http: ContentLength not specified!
#Description
Http: ContentLength not specified!
Message #
Event ID 4051: Http: HTTP Error: Http_HTTP_Error.
#Event ID 4052: Http: Content Lengtgh: Http_Content_Lengtgh.
#Provenance
Where this provider's schema came from, and which Windows build it was observed on. Windows can change a provider's event schema between builds, so use this to judge whether it matches the build you collect from.
ETW provider GUID 25b99a4c-2f80-4fcd-982d-69cd1f77badf
Defined in NetworkHelper.dll, which carries the event manifest.
Observed on:
- Win11-26200.6584 · schema read from the registered manifest · captured 2026-06-02