Microsoft-Windows-WinINet

330 events across 3 channels

Event ID	Title	Channel
101	Session handle HINTERNET created: UserAgent=UserAgent, AccessType=AccessType, …	Analytic
102	Handle ConnectionHandle created by InternetOpenURL: …	Analytic
103	Handle ConnectionHandle created by InternetConnect: SessionHandle=ParentHandle, …	Analytic
104	Request handle ConnectionHandle created by HttpOpenRequest: …	Analytic
105	Handle HINTERNET closed successfully.	Analytic
106	Failed to create handle: ParentHandle=HINTERNET, Error=Error.	Analytic
107	Handle HINTERNET failed to close: Error=Error.	Analytic
108	Request handle ConnectionHandle Server Details: Server=ServerName …	Analytic
200	HTTP request was received from API: RequestHandle=HINTERNET.	Analytic
201	HTTP request was sent successfully: RequestHandle=RequestHandle, …	Analytic
202	HTTP request send failed: Handle=Handle, Error=Error.	Analytic
203	HTTP response (ResponseCode) received: RequestHandle=RequestHandle, …	Analytic
204	HTTP response failed: Handle=Handle, Error=Error.	Analytic
205	HTTP connection (Handle=ConnectionHandle, SocketHandle=SocketHandle) closed due …	Analytic
206	Keep-alive connection is re-used: ConnectionHandle=ConnectionHandle, …	Analytic
207	Connection is returned to keep-alive pool: RequestHandle=ConnectionHandle, …	Analytic
208	Keep-alive connection is closed: ConnectionHandle=ConnectionHandle, …	Analytic
209	HTTP response entity body received: RequestHandle=RequestHandle.	Analytic
210	HTTP Request Headers RequestHandle=RequestHandle Headers.	Analytic
211	HTTP Response Headers RequestHandle=RequestHandle Headers.	Analytic
212	HTTP Request Headers OptionalData RequestHandle=RequestHandle Headers.	Analytic
213	WinInet::Http response entity body receive failed: Request Handle=RequestHandle, …	Analytic
301	TCP connection to server ServerName established: …	Analytic
302	TCP connection to ServerName for connection handle ConnectionHandle failed: …	Analytic
303	TCP connection closed successfully: SocketHandle=SocketHandle.	Analytic
304	DNS query for HostName hostname is sent: Handle=RequestHandle.	Analytic
305	DNS query for HostName hostname is complete: Handle=RequestHandle, …	Analytic
306	DNS query for HostName hostname failed: Handle=RequestHandle Error=Error.	Analytic
307	Re-used DNS cache, query for HostName hostname is complete: …	Analytic
308	A network change was detected: Handle=Handle.	Analytic
400		WebSocket
401		WebSocket
402		WebSocket
403		WebSocket
404		WebSocket
405		WebSocket
406		WebSocket
407		WebSocket
408		WebSocket
409		WebSocket
410		WebSocket
411		WebSocket
412		WebSocket
413		WebSocket
414		WebSocket
415		WebSocket
416		WebSocket
417		WebSocket
501	Received response including a cookie header: URL=URL.	Analytic
502	Client has stored a cookie in the cookie jar: Domain=Domain, Path=Path, …	Analytic
503	Client has deleted a cookie in the cookie jar: Domain=Domain, Path=Path, …	Analytic
504	Client has rejected a cookie sent by the server: Domain=Domain, Path=Path, …	Analytic
505	Server cookie was rejected by the client's P3P policy: Domain=Domain, Path=Path, …	Analytic
506	A cookie header was created for the request: URL=URL.	Analytic
507	Cookie added to the request header: Domain=Domain, Path=Path, Name=Name, …	Analytic
601	Auth response received: RequestHandle=RequestHandle, Scheme=Scheme, …	Analytic
602	Client sets username: RequestHandle=RequestHandle, IsProxy=IsProxy.	Analytic
603	Client sets password: RequestHandle=RequestHandle, IsProxy=IsProxy.	Analytic
604	Using cached credentials: RequestHandle=RequestHandle, IsProxy=IsProxy.	Analytic
605	Using default credentials: RequestHandle=RequestHandle, IsProxy=IsProxy.	Analytic
606	Client adds authorization headers to an HTTP request: …	Analytic
701	Client begins SSL negotiation: RequestHandle=RequestHandle.	Analytic
702	SSL negotiation between client and server has completed successfully: …	Analytic
703	SSL negotiation failed: RequestHandle=RequestHandle, Error=Error.	Analytic
704	Error validating server certificate (SCHANNEL error): …	Analytic
705	Server certificate validated: RequestHandle=RequestHandle, CertHash=CertHash, …	Analytic
706	Server requires a client certificate for client authorization: …	Analytic
707	There is no client certificate available: RequestHandle=RequestHandle.	Analytic
708	The selected client certificate will be used for the SSL transaction: …	Analytic
711	Client begins SSL renegotiation: RequestHandle=RequestHandle.	Analytic
712	SSL renegotiation between client and server has completed successfully: …	Analytic
713	SSL renegotiation failed: RequestHandle=RequestHandle, Error=Error.	Analytic
801	Client begins attempts to locate the WPAD configuration file: …	Analytic
802	Begin search for configuration file using DHCP: Interface=Interface.	Analytic
803	WPAD configuration file found using DHCP: Interface=Interface, …	Analytic
804	Search for WPAD configuration file using DHCP failed: Interface=Interface, …	Analytic
805	Begin search for configuration file using DNS: DetectFlags=DetectFlags.	Analytic
806	WPAD configuration file found using DNS: ConfigurationURL=ConfigurationURL, …	Analytic
807	Search for WPAD configuration file using DNS failed: DetectFlags=DetectFlags, …	Analytic
808	Search for WPAD configruation file failed: Error=Error.	Analytic
809	Begin downloading the configuration file from the configuration URL: …	Analytic
810	Client successfully downloaded the configuration file from the configuration …	Analytic
811	Downloading the configuration file from the configuration URL failed: …	Analytic
812	The downloaded configuration file could not be used: …	Analytic
813	Searching for Proxy Information for the URL: URL=URL.	Analytic
814	Client has successfully retrieved proxy data for accessing a specified resource: …	Analytic
815	Error locating proxy information for the URL: URL=URL, Error=Error.	Analytic
816	Blocking autoproxy determination started	Analytic
817	Blocking autoproxy determination stopped	Analytic
818	WinInet Activity Transfer Event	Analytic
819	AutoProxy SWPAD Decision (WPADNetworkDecision) NumConnections (NetworkCount).	Analytic
820	Autoproxy host IP lookup started	Analytic
821	Autoproxy host IP lookup stopped	Analytic
822	Autoproxy SWPAD lookup started	Analytic
823	Autoproxy SWPAD lookup stopped	Analytic
824	Autoproxy Detection with SWPAD ON started	Analytic
825	Autoproxy Detection with SWPAD ON stopped	Analytic
826	Autoproxy Detection with SWPAD UNKNOWN started	Analytic
827	Autoproxy Detection with SWPAD UNKNOWN stopped	Analytic
828	Autoproxy Script Download Started	Analytic
829	Autoproxy Script Download Stopped	Analytic
834	Autoproxy full scenario started	Analytic
835	Autoproxy full scenario stopped	Analytic
901	Application offline check started	Analytic
902	Application offline check complete	Analytic
1000		Analytic
1007		Analytic
1008		Analytic
1009		Analytic
1011		Analytic
1013		Analytic
1015		Analytic
1017		Analytic
1019		Analytic
1021		Analytic
1023		Analytic
1025		Analytic
1027		Analytic
1028		Analytic
1029		Analytic
1030		Analytic
1031		Analytic
1033		Analytic
1035		Analytic
1037		Analytic
1039		Analytic
1041		Analytic
1043		Analytic
1045		Analytic
1046		Analytic
1047		Analytic
1048		Analytic
1049		Analytic
1051		Analytic
1052		Analytic
1053		Analytic
1054		Analytic
1055		Analytic
1056		Analytic
1057	Requested URL=URL Verb=Verb RequestHeaders=RequestHeaders …	UsageLog
1058	Scavenged URL=URL.	UsageLog
1059		Analytic
1060		Analytic
1061		Analytic
1062		Analytic
1063		Analytic
1064		Analytic
1065		Analytic
1066		Analytic
1067		Analytic
1068		Analytic
1069		Analytic
1070		Analytic
1071		Analytic
1072		Analytic
1073		Analytic
1074		Analytic
1075		Analytic
1076		Analytic
1077		Analytic
1078		Analytic
1079		Analytic
1080		Analytic
1081		Analytic
1082		Analytic
1083		Analytic
1084		Analytic
1085		Analytic
1086		Analytic
1087		Analytic
1088		Analytic
1089		Analytic
1090		Analytic
1091		Analytic
1092		Analytic
1093		Analytic
1094		Analytic
1095		Analytic
1096		Analytic
1097		Analytic
1098		Analytic
1099		Analytic
1100		Analytic
1101		Analytic
1102		Analytic
1103		Analytic
1104		Analytic
1105		Analytic
1106		Analytic
1107		Analytic
1108		Analytic
1109		Analytic
1110		Analytic
1111		Analytic
1112		Analytic
1113		Analytic
1114		Analytic
1115		Analytic
1116		Analytic
1117		Analytic
1118		Analytic
1119		Analytic
1120		Analytic
1121		Analytic
1122		Analytic
1123		Analytic
1124		Analytic
1125		Analytic
1126		Analytic
1127		Analytic
1128		Analytic
1129		Analytic
1130		Analytic
1131		Analytic
1132		Analytic
1133		Analytic
1134		Analytic
1135		Analytic
1136		Analytic
1137		Analytic
1138		Analytic
1139		Analytic
1140		Analytic
1141		Analytic
1142		Analytic
1143		Analytic
1144		Analytic
1145		Analytic
1146		Analytic
1147		Analytic
1148		Analytic
1149		Analytic
1150		Analytic
1151		Analytic
1152		Analytic
1153		Analytic
1154		Analytic
1155		Analytic
1156		Analytic
1157		Analytic
1158		Analytic
1159		Analytic
1160		Analytic
1161		Analytic
1162		Analytic
1163		Analytic
1164		Analytic
1165		Analytic
1166		Analytic
1167		Analytic
1168		Analytic
1169		Analytic
1170		Analytic
1171		Analytic
1172		Analytic
1173		Analytic
1174		Analytic
1175		Analytic
1176		Analytic
1177		Analytic
1178		Analytic
1179		Analytic
1180		Analytic
1181		Analytic
1182		Analytic
1183		Analytic
1184		Analytic
1185		Analytic
1186		Analytic
1187		Analytic
1188		Analytic
1189		Analytic
1190		Analytic
1191		Analytic
1192		Analytic
1193		Analytic
1194		Analytic
1195		Analytic
1196		Analytic
1197		Analytic
1198		Analytic
1199		Analytic
1200		Analytic
1201		Analytic
1202		Analytic
1203		Analytic
1204		Analytic
1205		Analytic
1206		Analytic
1207		Analytic
1208		Analytic
1209		Analytic
1210		Analytic
1211		Analytic
1212		Analytic
1213		Analytic
1214		Analytic
1215		Analytic
1216		Analytic
1217		Analytic
1218		Analytic
1219		Analytic
1220		Analytic
1221		Analytic
1222		Analytic
1223		Analytic
1224		Analytic
1225		Analytic
1226		Analytic
1227		Analytic
1228		Analytic
1229		Analytic
1230		Analytic
1231		Analytic
1232		Analytic
1233		Analytic
1234		Analytic
1235		Analytic
1236		Analytic
1237		Analytic
1238		Analytic
1239		Analytic
1240		Analytic
1241		Analytic
1242		Analytic
1243		Analytic
1244		Analytic
1245		Analytic
1246		Analytic
1247		Analytic

Event ID 101 — Session handle HINTERNET created: UserAgent=UserAgent, AccessType=AccessType, ProxyList=ProxyList, ProxyBypassList=ProxyBypassList, Flags=Flags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_ROOT_HANDLE_CREATED

Description

Session handle HINTERNET created: UserAgent=UserAgent, AccessType=AccessType, ProxyList=ProxyList, ProxyBypassList=ProxyBypassList, Flags=Flags.

Message #

Session handle %1 created: UserAgent=%3, AccessType=%5, ProxyList=%7, ProxyBypassList=%9, Flags=%10

Fields #

Name	Description
`HINTERNET` Pointer	—
`_UserAgentLength` UInt16	—
`UserAgent` AnsiString	—
`_AccessTypeLength` UInt16	—
`AccessType` AnsiString	—
`_ProxyListLength` UInt16	—
`ProxyList` AnsiString	—
`_ProxyBypassListLength` UInt16	—
`ProxyBypassList` AnsiString	—
`Flags` UInt32	—

Event ID 102 — Handle ConnectionHandle created by InternetOpenURL: SessionHandle=ParentHandle,URL=URL, Headers=Headers, Flags=Flags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_OPEN_URL_HANDLE_CREATED

Description

Handle ConnectionHandle created by InternetOpenURL: SessionHandle=ParentHandle,URL=URL, Headers=Headers, Flags=Flags.

Message #

Handle %1 created by InternetOpenURL: SessionHandle=%2,URL=%4, Headers=%6, Flags=%7

Fields #

Name	Description
`ConnectionHandle` Pointer	—
`ParentHandle` Pointer	—
`_URLLength` UInt16	—
`URL` AnsiString	—
`_HeadersLength` UInt16	—
`Headers` AnsiString	—
`Flags` UInt32	—

Event ID 103 — Handle ConnectionHandle created by InternetConnect: SessionHandle=ParentHandle, Server=ServerName:ServerPort, Service, Flags=Flags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_CONNECT_HANDLE_CREATED

Description

Handle ConnectionHandle created by InternetConnect: SessionHandle=ParentHandle, Server=ServerName:ServerPort, Service, Flags=Flags.

Message #

Handle %1 created by InternetConnect: SessionHandle=%2, Server=%4:%5, %7, Flags=%8

Fields #

Name	Description
`ConnectionHandle` Pointer	—
`ParentHandle` Pointer	—
`_ServerNameLength` UInt16	—
`ServerName` AnsiString	—
`ServerPort` UInt32	—
`_ServiceLength` UInt16	—
`Service` AnsiString	—
`Flags` UInt32	—

Event ID 104 — Request handle ConnectionHandle created by HttpOpenRequest: ConnectionHandle=ParentHandle, Verb, Target=ObjectName, Ver=Version, Referrer=Referrer, Media types=AcceptTypes, Flags=Flags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_REQUEST_HANDLE_CREATED

Description

Request handle ConnectionHandle created by HttpOpenRequest: ConnectionHandle=ParentHandle, Verb, Target=ObjectName, Ver=Version, Referrer=Referrer, Media types=AcceptTypes, Flags=Flags.

Message #

Request handle %1 created by HttpOpenRequest: ConnectionHandle=%2, %4, Target=%6, Ver=%8, Referrer=%10, Media types=%12, Flags=%13

Fields #

Name	Description
`ConnectionHandle` Pointer	—
`ParentHandle` Pointer	—
`_VerbLength` UInt16	—
`Verb` AnsiString	—
`_ObjectNameLength` UInt16	—
`ObjectName` AnsiString	—
`_VersionLength` UInt16	—
`Version` AnsiString	—
`_ReferrerLength` UInt32	—
`Referrer` AnsiString	—
`_AcceptTypesLength` UInt16	—
`AcceptTypes` AnsiString	—
`Flags` UInt32	—

Event ID 105 — Handle HINTERNET closed successfully.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HANDLE_CLOSED

Description

Handle HINTERNET closed successfully.

Message #

Handle %1 closed successfully

Fields #

Name	Description
`HINTERNET` Pointer	—

Event ID 106 — Failed to create handle: ParentHandle=HINTERNET, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HANDLE_CREATE_FAILED

Description

Failed to create handle: ParentHandle=HINTERNET, Error=Error.

Message #

Failed to create handle: ParentHandle=%1, Error=%2

Fields #

Name	Description
`HINTERNET` Pointer	—
`Error` UInt32	—

Event ID 107 — Handle HINTERNET failed to close: Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HANDLE_CLOSE_FAILED

Description

Handle HINTERNET failed to close: Error=Error.

Message #

Handle %1 failed to close: Error=%2

Fields #

Name	Description
`HINTERNET` Pointer	—
`Error` UInt32	—

Event ID 108 — Request handle ConnectionHandle Server Details: Server=ServerName Port=ServerPort Service=Service.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_REQUEST_HANDLE_CREATED

Description

Request handle ConnectionHandle Server Details: Server=ServerName Port=ServerPort Service=Service.

Message #

Request handle %1 Server Details: Server=%3 Port=%4 Service=%6

Fields #

Name	Description
`ConnectionHandle` Pointer	—
`_ServerNameLength` UInt16	—
`ServerName` AnsiString	—
`ServerPort` UInt32	—
`_ServiceLength` UInt16	—
`Service` AnsiString	—

Event ID 200 — HTTP request was received from API: RequestHandle=HINTERNET.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_REQUEST
Opcode: Start

Description

HTTP request was received from API: RequestHandle=HINTERNET.

Message #

HTTP request was received from API: RequestHandle=%1

Fields #

Name	Description
`HINTERNET` Pointer	—
`Context` Pointer	—

Event ID 201 — HTTP request was sent successfully: RequestHandle=RequestHandle, SocketHandle=SocketHandle, Verb, CookieSent= Cookie.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_REQUEST
Opcode: Stop

Description

HTTP request was sent successfully: RequestHandle=RequestHandle, SocketHandle=SocketHandle, Verb, CookieSent= Cookie.

Message #

HTTP request was sent successfully: RequestHandle=%1, SocketHandle=%2, %4, CookieSent= %5

Fields #

Name	Description
`RequestHandle` Pointer	—
`SocketHandle` Pointer	—
`_VerbLength` UInt16	—
`Verb` AnsiString	—
`Cookie` Boolean	—

Event ID 202 — HTTP request send failed: Handle=Handle, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_REQUEST
Opcode: Fail

Description

HTTP request send failed: Handle=Handle, Error=Error.

Message #

HTTP request send failed: Handle=%1, Error=%2

Fields #

Name	Description
`Handle` Pointer	—
`Error` UInt32	—

Event ID 203 — HTTP response (ResponseCode) received: RequestHandle=RequestHandle, SocketHandle=SocketHandle, Verb, ContentLength=ContentLength.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_RESPONSE
Opcode: Stop

Description

HTTP response (ResponseCode) received: RequestHandle=RequestHandle, SocketHandle=SocketHandle, Verb, ContentLength=ContentLength.

Message #

HTTP response (%1) received: RequestHandle=%2, SocketHandle=%3, %5, ContentLength=%7

Fields #

Name	Description
`ResponseCode` Int32	—
`RequestHandle` Pointer	—
`SocketHandle` Pointer	—
`_VerbLength` UInt16	—
`Verb` AnsiString	—
`_ContentLengthStrLength` UInt16	—
`ContentLength` AnsiString	—

Event ID 204 — HTTP response failed: Handle=Handle, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_RESPONSE
Opcode: Fail

Description

HTTP response failed: Handle=Handle, Error=Error.

Message #

HTTP response failed: Handle=%1, Error=%2

Fields #

Name	Description
`Handle` Pointer	—
`Error` UInt32	—

Event ID 205 — HTTP connection (Handle=ConnectionHandle, SocketHandle=SocketHandle) closed due to the following reason: Reason.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_CONNECTION_CLOSED

Description

HTTP connection (Handle=ConnectionHandle, SocketHandle=SocketHandle) closed due to the following reason: Reason.

Message #

HTTP connection (Handle=%1, SocketHandle=%2) closed due to the following reason: %4

Fields #

Name	Description
`ConnectionHandle` Pointer	—
`SocketHandle` Pointer	—
`_ReasonLength` UInt16	—
`Reason` AnsiString	—

Event ID 206 — Keep-alive connection is re-used: ConnectionHandle=ConnectionHandle, SocketHandle=SocketHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_KEEP_ALIVE_CONNECTION_REUSED

Description

Keep-alive connection is re-used: ConnectionHandle=ConnectionHandle, SocketHandle=SocketHandle.

Message #

Keep-alive connection is re-used: ConnectionHandle=%1, SocketHandle=%2

Fields #

Name	Description
`ConnectionHandle` Pointer	—
`SocketHandle` Pointer	—

Event ID 207 — Connection is returned to keep-alive pool: RequestHandle=ConnectionHandle, SocketHandle=SocketHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_KEEP_ALIVE_CONNECTION_POOLED

Description

Connection is returned to keep-alive pool: RequestHandle=ConnectionHandle, SocketHandle=SocketHandle.

Message #

Connection is returned to keep-alive pool: RequestHandle=%1, SocketHandle=%2

Fields #

Name	Description
`ConnectionHandle` Pointer	—
`SocketHandle` Pointer	—

Event ID 208 — Keep-alive connection is closed: ConnectionHandle=ConnectionHandle, SocketHandle=SocketHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_KEEP_ALIVE_CONNECTION_CLOSED

Description

Keep-alive connection is closed: ConnectionHandle=ConnectionHandle, SocketHandle=SocketHandle.

Message #

Keep-alive connection is closed: ConnectionHandle=%1, SocketHandle=%2

Fields #

Name	Description
`ConnectionHandle` Pointer	—
`SocketHandle` Pointer	—

Event ID 209 — HTTP response entity body received: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_RESPONSE_BODY_RECEIVED

Description

HTTP response entity body received: RequestHandle=RequestHandle.

Message #

HTTP response entity body received: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer	—

Event ID 210 — HTTP Request Headers RequestHandle=RequestHandle Headers.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_REQUEST_HEADER

Description

HTTP Request Headers RequestHandle=RequestHandle Headers.

Message #

HTTP Request Headers RequestHandle=%1 %3

Fields #

Name	Description
`RequestHandle` Pointer	—
`Length` UInt16	—
`Headers` AnsiString	—

Event ID 211 — HTTP Response Headers RequestHandle=RequestHandle Headers.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_RESPONSE_HEADER

Description

HTTP Response Headers RequestHandle=RequestHandle Headers.

Message #

HTTP Response Headers RequestHandle=%1 %3

Fields #

Name	Description
`RequestHandle` Pointer	—
`Length` UInt16	—
`Headers` AnsiString	—

Event ID 212 — HTTP Request Headers OptionalData RequestHandle=RequestHandle Headers.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_REQUEST_HEADER_OPTIONAL

Description

HTTP Request Headers OptionalData RequestHandle=RequestHandle Headers.

Message #

HTTP Request Headers OptionalData RequestHandle=%1 %3

Fields #

Name	Description
`RequestHandle` Pointer	—
`Length` UInt16	—
`Headers` AnsiString	—

Event ID 213 — WinInet::Http response entity body receive failed: Request Handle=RequestHandle, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTP_RESPONSE_BODY_READ_ERROR

Description

WinInet::Http response entity body receive failed: Request Handle=RequestHandle, Error=Error.

Message #

WinInet::Http response entity body receive failed: Request Handle=%1, Error=%2

Fields #

Name	Description
`RequestHandle` Pointer	—
`Error` UInt32	—

Event ID 301 — TCP connection to server ServerName established: ConnectionHandle=ConnectionHandle, SocketHandle=SocketHandle, LocalPort=LocalPort.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_TCP_CONNECTION
Opcode: Start

Description

TCP connection to server ServerName established: ConnectionHandle=ConnectionHandle, SocketHandle=SocketHandle, LocalPort=LocalPort.

Message #

TCP connection to server %2 established: ConnectionHandle=%3, SocketHandle=%4, LocalPort=%5

Fields #

Name	Description
`_ServerNameLength` UInt16	—
`ServerName` AnsiString	—
`ConnectionHandle` Pointer	—
`SocketHandle` Pointer	—
`LocalPort` UInt32	—

Event ID 302 — TCP connection to ServerName for connection handle ConnectionHandle failed: Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_TCP_CONNECTION
Opcode: Fail

Description

TCP connection to ServerName for connection handle ConnectionHandle failed: Error=Error.

Message #

TCP connection to %2 for connection handle %3 failed: Error=%4

Fields #

Name	Description
`_ServerNameLength` UInt16	—
`ServerName` AnsiString	—
`ConnectionHandle` Pointer	—
`Error` UInt32	—

Event ID 303 — TCP connection closed successfully: SocketHandle=SocketHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_TCP_CONNECTION
Opcode: Stop

Description

TCP connection closed successfully: SocketHandle=SocketHandle.

Message #

TCP connection closed successfully: SocketHandle=%1

Fields #

Name	Description
`SocketHandle` Pointer	—

Event ID 304 — DNS query for HostName hostname is sent: Handle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_DNS_QUERY
Opcode: Start

Description

DNS query for HostName hostname is sent: Handle=RequestHandle.

Message #

DNS query for %2 hostname is sent: Handle=%3

Fields #

Name	Description
`_HostNameLength` UInt16	—
`HostName` AnsiString	—
`RequestHandle` Pointer	—

Event ID 305 — DNS query for HostName hostname is complete: Handle=RequestHandle, Addresses=AddressList.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_DNS_QUERY
Opcode: Stop

Description

DNS query for HostName hostname is complete: Handle=RequestHandle, Addresses=AddressList.

Message #

DNS query for %2 hostname is complete: Handle=%3, Addresses=%5

Fields #

Name	Description
`_HostNameLength` UInt16	—
`HostName` AnsiString	—
`RequestHandle` Pointer	—
`_AddressListLength` UInt16	—
`AddressList` AnsiString	—

Event ID 306 — DNS query for HostName hostname failed: Handle=RequestHandle Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_DNS_QUERY
Opcode: Fail

Description

DNS query for HostName hostname failed: Handle=RequestHandle Error=Error.

Message #

DNS query for %2 hostname failed: Handle=%3 Error=%4

Fields #

Name	Description
`_HostNameLength` UInt16	—
`HostName` AnsiString	—
`RequestHandle` Pointer	—
`Error` UInt32	—

Event ID 307 — Re-used DNS cache, query for HostName hostname is complete: Handle=RequestHandle, Addresses=AddressList.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_DNS_QUERY
Opcode: Stop

Description

Re-used DNS cache, query for HostName hostname is complete: Handle=RequestHandle, Addresses=AddressList.

Message #

Re-used DNS cache, query for %2 hostname is complete: Handle=%3, Addresses=%5

Fields #

Name	Description
`_HostNameLength` UInt16	—
`HostName` AnsiString	—
`RequestHandle` Pointer	—
`_AddressListLength` UInt16	—
`AddressList` AnsiString	—

Event ID 308 — A network change was detected: Handle=Handle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_NETWORK_CHANGE_DETECTED

Description

A network change was detected: Handle=Handle.

Message #

A network change was detected: Handle=%1

Fields #

Name	Description
`Handle` Pointer	—

Event ID 400 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketUpgrade

Fields #

Name	Description
`CorrelationID` GUID	—
`InternetFlags` UInt32	—
`Length` UInt16	—
`Headers` AnsiString	—

Event ID 401 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketUpgrade

Fields #

Name	Description
`CorrelationID` GUID	—
`ResponseCode` Int32	—
`Length` UInt16	—
`Headers` AnsiString	—

Event ID 402 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession
Opcode: Start

Fields #

Name	Description
`CorrelationID` GUID	—

Event ID 403 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession
Opcode: Stop

Fields #

Name	Description
`CorrelationID` GUID	—
`Status` UInt16	— NTSTATUS reference

Event ID 404 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—
`Length` Int64	—
`TruncatedLength` UInt16	—
`TruncatedData` UnicodeString	—

Event ID 405 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—
`Length` Int64	—
`TruncatedLength` UInt16	—
`TruncatedData` UnicodeString	—

Event ID 406 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—
`Length` Int64	—

Event ID 407 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—
`Status` UInt16	— NTSTATUS reference
`Length` UInt32	—
`Reason` AnsiString	—

Event ID 408 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—
`Length` Int64	—

Event ID 409 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—
`Status` UInt16	— NTSTATUS reference
`Length` UInt32	—
`Reason` AnsiString	—

Event ID 410 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—
`Length` Int64	—

Event ID 411 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—
`Length` Int64	—

Event ID 412 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—

Event ID 413 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—

Event ID 414 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—
`SequenceNumber` UInt32	—
`PayloadByteLength` UInt32	—
`Payload` Binary	—

Event ID 415 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—
`SequenceNumber` UInt32	—
`PayloadByteLength` UInt32	—
`Payload` Binary	—

Event ID 416 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—
`SequenceNumber` UInt32	—
`PayloadByteLength` UInt32	—
`Payload` Binary	—

Event ID 417 —

Provider: Microsoft-Windows-WinINet
Channel: WebSocket
Task: Wininet_WebSocketSession

Fields #

Name	Description
`CorrelationID` GUID	—
`SequenceNumber` UInt32	—
`PayloadByteLength` UInt32	—
`Payload` Binary	—

Event ID 501 — Received response including a cookie header: URL=URL.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_HEADER_RECEIVED

Description

Received response including a cookie header: URL=URL.

Message #

Received response including a cookie header: URL=%2

Fields #

Name	Description
`URLLength` UInt32	—
`URL` AnsiString	—

Event ID 502 — Client has stored a cookie in the cookie jar: Domain=Domain, Path=Path, Name=Name, Value=Value.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_STORED

Description

Client has stored a cookie in the cookie jar: Domain=Domain, Path=Path, Name=Name, Value=Value.

Message #

Client has stored a cookie in the cookie jar: Domain=%2, Path=%4, Name=%6, Value=%8

Fields #

Name	Description
`_DomainLength` UInt16	—
`Domain` AnsiString	—
`_PathLength` UInt16	—
`Path` AnsiString	—
`_NameLength` UInt16	—
`Name` AnsiString	—
`_ValueLength` UInt16	—
`Value` AnsiString	—

Event ID 503 — Client has deleted a cookie in the cookie jar: Domain=Domain, Path=Path, Name=Name, Value=Value.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_DELETED

Description

Client has deleted a cookie in the cookie jar: Domain=Domain, Path=Path, Name=Name, Value=Value.

Message #

Client has deleted a cookie in the cookie jar: Domain=%2, Path=%4, Name=%6, Value=%8

Fields #

Name	Description
`_DomainLength` UInt16	—
`Domain` AnsiString	—
`_PathLength` UInt16	—
`Path` AnsiString	—
`_NameLength` UInt16	—
`Name` AnsiString	—
`_ValueLength` UInt16	—
`Value` AnsiString	—

Event ID 504 — Client has rejected a cookie sent by the server: Domain=Domain, Path=Path, Name=Name, Value=Value.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_BLOCKED

Description

Client has rejected a cookie sent by the server: Domain=Domain, Path=Path, Name=Name, Value=Value.

Message #

Client has rejected a cookie sent by the server: Domain=%2, Path=%4, Name=%6, Value=%8

Fields #

Name	Description
`_DomainLength` UInt16	—
`Domain` AnsiString	—
`_PathLength` UInt16	—
`Path` AnsiString	—
`_NameLength` UInt16	—
`Name` AnsiString	—
`_ValueLength` UInt16	—
`Value` AnsiString	—

Event ID 505 — Server cookie was rejected by the client's P3P policy: Domain=Domain, Path=Path, Name=Name, Value=Value.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_P3P_REJECTED

Description

Server cookie was rejected by the client's P3P policy: Domain=Domain, Path=Path, Name=Name, Value=Value.

Message #

Server cookie was rejected by the client's P3P policy: Domain=%2, Path=%4, Name=%6, Value=%8

Fields #

Name	Description
`_DomainLength` UInt16	—
`Domain` AnsiString	—
`_PathLength` UInt16	—
`Path` AnsiString	—
`_NameLength` UInt16	—
`Name` AnsiString	—
`_ValueLength` UInt16	—
`Value` AnsiString	—

Event ID 506 — A cookie header was created for the request: URL=URL.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_REQUEST_HEADER_CREATED

Description

A cookie header was created for the request: URL=URL.

Message #

A cookie header was created for the request: URL=%2

Fields #

Name	Description
`URLLength` UInt32	—
`URL` AnsiString	—

Event ID 507 — Cookie added to the request header: Domain=Domain, Path=Path, Name=Name, Value=Value.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_COOKIE_ADDED_TO_HEADER

Description

Cookie added to the request header: Domain=Domain, Path=Path, Name=Name, Value=Value.

Message #

Cookie added to the request header: Domain=%2, Path=%4, Name=%6, Value=%8

Fields #

Name	Description
`_DomainLength` UInt16	—
`Domain` AnsiString	—
`_PathLength` UInt16	—
`Path` AnsiString	—
`_NameLength` UInt16	—
`Name` AnsiString	—
`_ValueLength` UInt16	—
`Value` AnsiString	—

Event ID 601 — Auth response received: RequestHandle=RequestHandle, Scheme=Scheme, IsProxy=IsProxy.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTH_RESPONSE_RECEIVED

Description

Auth response received: RequestHandle=RequestHandle, Scheme=Scheme, IsProxy=IsProxy.

Message #

Auth response received: RequestHandle=%1, Scheme=%3, IsProxy=%4

Fields #

Name	Description
`RequestHandle` Pointer	—
`_SchemeLength` UInt16	—
`Scheme` AnsiString	—
`IsProxy` Boolean	—

Event ID 602 — Client sets username: RequestHandle=RequestHandle, IsProxy=IsProxy.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTH_CLIENT_SETS_USERNAME

Description

Client sets username: RequestHandle=RequestHandle, IsProxy=IsProxy.

Message #

Client sets username: RequestHandle=%1, IsProxy=%2

Fields #

Name	Description
`RequestHandle` Pointer	—
`IsProxy` Boolean	—

Event ID 603 — Client sets password: RequestHandle=RequestHandle, IsProxy=IsProxy.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTH_CLIENT_SETS_PASSWORD

Description

Client sets password: RequestHandle=RequestHandle, IsProxy=IsProxy.

Message #

Client sets password: RequestHandle=%1, IsProxy=%2

Fields #

Name	Description
`RequestHandle` Pointer	—
`IsProxy` Boolean	—

Event ID 604 — Using cached credentials: RequestHandle=RequestHandle, IsProxy=IsProxy.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTH_USING_CACHED_CREDS

Description

Using cached credentials: RequestHandle=RequestHandle, IsProxy=IsProxy.

Message #

Using cached credentials: RequestHandle=%1, IsProxy=%2

Fields #

Name	Description
`RequestHandle` Pointer	—
`IsProxy` Boolean	—

Event ID 605 — Using default credentials: RequestHandle=RequestHandle, IsProxy=IsProxy.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTH_USING_DEFAULT_CREDS

Description

Using default credentials: RequestHandle=RequestHandle, IsProxy=IsProxy.

Message #

Using default credentials: RequestHandle=%1, IsProxy=%2

Fields #

Name	Description
`RequestHandle` Pointer	—
`IsProxy` Boolean	—

Event ID 606 — Client adds authorization headers to an HTTP request: RequestHandle=RequestHandle, Scheme=Scheme, IsProxy=IsProxy.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTH_CLIENT_ADD_HEADERS

Description

Client adds authorization headers to an HTTP request: RequestHandle=RequestHandle, Scheme=Scheme, IsProxy=IsProxy.

Message #

Client adds authorization headers to an HTTP request: RequestHandle=%1, Scheme=%3, IsProxy=%4

Fields #

Name	Description
`RequestHandle` Pointer	—
`_SchemeLength` UInt16	—
`Scheme` AnsiString	—
`IsProxy` Boolean	—

Event ID 701 — Client begins SSL negotiation: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_NEGOTIATION
Opcode: Start

Description

Client begins SSL negotiation: RequestHandle=RequestHandle.

Message #

Client begins SSL negotiation: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer	—

Event ID 702 — SSL negotiation between client and server has completed successfully: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_NEGOTIATION
Opcode: Stop

Description

SSL negotiation between client and server has completed successfully: RequestHandle=RequestHandle.

Message #

SSL negotiation between client and server has completed successfully: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer	—

Event ID 703 — SSL negotiation failed: RequestHandle=RequestHandle, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_NEGOTIATION
Opcode: Fail

Description

SSL negotiation failed: RequestHandle=RequestHandle, Error=Error.

Message #

SSL negotiation failed: RequestHandle=%1, Error=%2

Fields #

Name	Description
`RequestHandle` Pointer	—
`Error` UInt32	—

Event ID 704 — Error validating server certificate (SCHANNEL error): RequestHandle=RequestHandle, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_SERVER_CERT_ERROR

Description

Error validating server certificate (SCHANNEL error): RequestHandle=RequestHandle, Error=Error.

Message #

Error validating server certificate (SCHANNEL error): RequestHandle=%1, Error=%2

Fields #

Name	Description
`RequestHandle` Pointer	—
`Error` UInt32	—

Event ID 705 — Server certificate validated: RequestHandle=RequestHandle, CertHash=CertHash, WarningFlags=WarningFlags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_SERVER_CERT_VALIDATED

Description

Server certificate validated: RequestHandle=RequestHandle, CertHash=CertHash, WarningFlags=WarningFlags.

Message #

Server certificate validated: RequestHandle=%1, CertHash=%3, WarningFlags=%4

Fields #

Name	Description
`RequestHandle` Pointer	—
`_CertHashLength` UInt16	—
`CertHash` AnsiString	—
`WarningFlags` UInt32	—

Event ID 706 — Server requires a client certificate for client authorization: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_CLIENT_CERT_REQUIRED

Description

Server requires a client certificate for client authorization: RequestHandle=RequestHandle.

Message #

Server requires a client certificate for client authorization: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer	—

Event ID 707 — There is no client certificate available: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_CLIENT_CERT_UNAVAILABLE

Description

There is no client certificate available: RequestHandle=RequestHandle.

Message #

There is no client certificate available: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer	—
`Error` UInt32	—

Event ID 708 — The selected client certificate will be used for the SSL transaction: RequestHandle=RequestHandle, CertHash=CertHash.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_CLIENT_CERT_SELECTED

Description

The selected client certificate will be used for the SSL transaction: RequestHandle=RequestHandle, CertHash=CertHash.

Message #

The selected client certificate will be used for the SSL transaction: RequestHandle=%1, CertHash=%3

Fields #

Name	Description
`RequestHandle` Pointer	—
`_CertHashLength` UInt16	—
`CertHash` AnsiString	—

Event ID 711 — Client begins SSL renegotiation: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_RENEGOTIATION
Opcode: Start

Description

Client begins SSL renegotiation: RequestHandle=RequestHandle.

Message #

Client begins SSL renegotiation: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer	—

Event ID 712 — SSL renegotiation between client and server has completed successfully: RequestHandle=RequestHandle.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_RENEGOTIATION
Opcode: Stop

Description

SSL renegotiation between client and server has completed successfully: RequestHandle=RequestHandle.

Message #

SSL renegotiation between client and server has completed successfully: RequestHandle=%1

Fields #

Name	Description
`RequestHandle` Pointer	—

Event ID 713 — SSL renegotiation failed: RequestHandle=RequestHandle, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_HTTPS_RENEGOTIATION
Opcode: Fail

Description

SSL renegotiation failed: RequestHandle=RequestHandle, Error=Error.

Message #

SSL renegotiation failed: RequestHandle=%1, Error=%2

Fields #

Name	Description
`RequestHandle` Pointer	—
`Error` UInt32	—

Event ID 801 — Client begins attempts to locate the WPAD configuration file: ConnectionName=ConnectionName, DetectFlags=DetectFlags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_SEARCH
Opcode: Start

Description

Client begins attempts to locate the WPAD configuration file: ConnectionName=ConnectionName, DetectFlags=DetectFlags.

Message #

Client begins attempts to locate the WPAD configuration file: ConnectionName=%2, DetectFlags=%3

Fields #

Name	Description
`_ConnectionNameLength` UInt16	—
`ConnectionName` UnicodeString	—
`DetectFlags` UInt32	—

Event ID 802 — Begin search for configuration file using DHCP: Interface=Interface.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DHCP
Opcode: Start

Description

Begin search for configuration file using DHCP: Interface=Interface.

Message #

Begin search for configuration file using DHCP: Interface=%2

Fields #

Name	Description
`_InterfaceLength` UInt16	—
`Interface` UnicodeString	—

Event ID 803 — WPAD configuration file found using DHCP: Interface=Interface, ConfigurationURL=ConfigurationURL.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DHCP
Opcode: Stop

Description

WPAD configuration file found using DHCP: Interface=Interface, ConfigurationURL=ConfigurationURL.

Message #

WPAD configuration file found using DHCP: Interface=%2, ConfigurationURL=%4

Fields #

Name	Description
`_InterfaceLength` UInt16	—
`Interface` UnicodeString	—
`_ConfigurationURLLength` UInt16	—
`ConfigurationURL` UnicodeString	—

Event ID 804 — Search for WPAD configuration file using DHCP failed: Interface=Interface, ConfigurationURL=ConfigurationURL, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DHCP
Opcode: Fail

Description

Search for WPAD configuration file using DHCP failed: Interface=Interface, ConfigurationURL=ConfigurationURL, Error=Error.

Message #

Search for WPAD configuration file using DHCP failed: Interface=%2, ConfigurationURL=%4, Error=%5

Fields #

Name	Description
`_InterfaceLength` UInt16	—
`Interface` UnicodeString	—
`_ConfigurationURLLength` UInt16	—
`ConfigurationURL` UnicodeString	—
`Error` UInt32	—

Event ID 805 — Begin search for configuration file using DNS: DetectFlags=DetectFlags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DNS
Opcode: Start

Description

Begin search for configuration file using DNS: DetectFlags=DetectFlags.

Message #

Begin search for configuration file using DNS: DetectFlags=%1

Fields #

Name	Description
`DetectFlags` UInt32	—

Event ID 806 — WPAD configuration file found using DNS: ConfigurationURL=ConfigurationURL, DetectFlags=DetectFlags.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DNS
Opcode: Stop

Description

WPAD configuration file found using DNS: ConfigurationURL=ConfigurationURL, DetectFlags=DetectFlags.

Message #

WPAD configuration file found using DNS: ConfigurationURL=%2, DetectFlags=%3

Fields #

Name	Description
`_ConfigurationURLLength` UInt16	—
`ConfigurationURL` UnicodeString	—
`DetectFlags` UInt32	—

Event ID 807 — Search for WPAD configuration file using DNS failed: DetectFlags=DetectFlags, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DNS
Opcode: Fail

Description

Search for WPAD configuration file using DNS failed: DetectFlags=DetectFlags, Error=Error.

Message #

Search for WPAD configuration file using DNS failed: DetectFlags=%1, Error=%2

Fields #

Name	Description
`DetectFlags` UInt32	—
`Error` UInt32	—

Event ID 808 — Search for WPAD configruation file failed: Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_SEARCH
Opcode: Fail

Description

Search for WPAD configruation file failed: Error=Error.

Message #

Search for WPAD configruation file failed: Error=%1

Fields #

Name	Description
`Error` UInt32	—

Event ID 809 — Begin downloading the configuration file from the configuration URL: ConfigurationURL=ConfigurationURL.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DOWNLOAD
Opcode: Start

Description

Begin downloading the configuration file from the configuration URL: ConfigurationURL=ConfigurationURL.

Message #

Begin downloading the configuration file from the configuration URL: ConfigurationURL=%2

Fields #

Name	Description
`_ConfigurationURLLength` UInt16	—
`ConfigurationURL` UnicodeString	—

Event ID 810 — Client successfully downloaded the configuration file from the configuration URL: ConfigurationURL=ConfigurationURL.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DOWNLOAD
Opcode: Stop

Description

Client successfully downloaded the configuration file from the configuration URL: ConfigurationURL=ConfigurationURL.

Message #

Client successfully downloaded the configuration file from the configuration URL: ConfigurationURL=%2

Fields #

Name	Description
`_ConfigurationURLLength` UInt16	—
`ConfigurationURL` UnicodeString	—

Event ID 811 — Downloading the configuration file from the configuration URL failed: ConfigurationURL=ConfigurationURL, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DOWNLOAD
Opcode: Fail

Description

Downloading the configuration file from the configuration URL failed: ConfigurationURL=ConfigurationURL, Error=Error.

Message #

Downloading the configuration file from the configuration URL failed: ConfigurationURL=%2, Error=%3

Fields #

Name	Description
`_ConfigurationURLLength` UInt16	—
`ConfigurationURL` UnicodeString	—
`Error` UInt32	—

Event ID 812 — The downloaded configuration file could not be used: ConfigurationURL=ConfigurationURL, MIMEType=MIMEType, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_DOWNLOAD
Opcode: Fail

Description

The downloaded configuration file could not be used: ConfigurationURL=ConfigurationURL, MIMEType=MIMEType, Error=Error.

Message #

The downloaded configuration file could not be used: ConfigurationURL=%2, MIMEType=%4, Error=%5

Fields #

Name	Description
`_ConfigurationURLLength` UInt16	—
`ConfigurationURL` UnicodeString	—
`_MIMETypeLength` UInt16	—
`MIMEType` UnicodeString	—
`Error` UInt32	—

Event ID 813 — Searching for Proxy Information for the URL: URL=URL.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_FIND_INFO_FOR_URL
Opcode: Start

Description

Searching for Proxy Information for the URL: URL=URL.

Message #

Searching for Proxy Information for the URL: URL=%2

Fields #

Name	Description
`_URLLength` UInt16	—
`URL` UnicodeString	—

Event ID 814 — Client has successfully retrieved proxy data for accessing a specified resource: URL=URL, ProxyString=ProxyString.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_FIND_INFO_FOR_URL
Opcode: Stop

Description

Client has successfully retrieved proxy data for accessing a specified resource: URL=URL, ProxyString=ProxyString.

Message #

Client has successfully retrieved proxy data for accessing a specified resource: URL=%2, ProxyString=%4

Fields #

Name	Description
`_URLLength` UInt16	—
`URL` UnicodeString	—
`_ProxyStringLength` UInt16	—
`ProxyString` UnicodeString	—

Event ID 815 — Error locating proxy information for the URL: URL=URL, Error=Error.

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_FIND_INFO_FOR_URL
Opcode: Fail

Description

Error locating proxy information for the URL: URL=URL, Error=Error.

Message #

Error locating proxy information for the URL: URL=%2, Error=%3

Fields #

Name	Description
`_URLLength` UInt16	—
`URL` UnicodeString	—
`Error` UInt32	—

Event ID 816 — Blocking autoproxy determination started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_BLOCKING_AUTOPROXY_DETERMINATION
Opcode: Start

Description

Blocking autoproxy determination started.

Message #

Blocking autoproxy determination started

Event ID 817 — Blocking autoproxy determination stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_BLOCKING_AUTOPROXY_DETERMINATION
Opcode: Stop

Description

Blocking autoproxy determination stopped.

Message #

Blocking autoproxy determination stopped

Event ID 818 — WinInet Activity Transfer Event

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_TRANSFER

Description

WinInet Activity Transfer Event.

Message #

WinInet Activity Transfer Event

Event ID 819 — AutoProxy SWPAD Decision (WPADNetworkDecision) NumConnections (NetworkCount).

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_SWPAD

Description

AutoProxy SWPAD Decision (WPADNetworkDecision) NumConnections (NetworkCount).

Message #

AutoProxy SWPAD Decision (%1) NumConnections (%2)

Fields #

Name	Description
`WPADNetworkDecision` UInt32	—
`NetworkCount` UInt32	—

Event ID 820 — Autoproxy host IP lookup started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_HOST_IP_LOOKUP
Opcode: Start

Description

Autoproxy host IP lookup started.

Message #

Autoproxy host IP lookup started

Event ID 821 — Autoproxy host IP lookup stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_HOST_IP_LOOKUP
Opcode: Stop

Description

Autoproxy host IP lookup stopped.

Message #

Autoproxy host IP lookup stopped

Event ID 822 — Autoproxy SWPAD lookup started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_SWPAD_LOOKUP
Opcode: Start

Description

Autoproxy SWPAD lookup started.

Message #

Autoproxy SWPAD lookup started

Event ID 823 — Autoproxy SWPAD lookup stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_SWPAD_LOOKUP
Opcode: Stop

Description

Autoproxy SWPAD lookup stopped.

Message #

Autoproxy SWPAD lookup stopped

Event ID 824 — Autoproxy Detection with SWPAD ON started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_KNOWN_DETECTION
Opcode: Start

Description

Autoproxy Detection with SWPAD ON started.

Message #

Autoproxy Detection with SWPAD ON started

Event ID 825 — Autoproxy Detection with SWPAD ON stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_KNOWN_DETECTION
Opcode: Stop

Description

Autoproxy Detection with SWPAD ON stopped.

Message #

Autoproxy Detection with SWPAD ON stopped

Event ID 826 — Autoproxy Detection with SWPAD UNKNOWN started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_UNKNOWN_DETECTION
Opcode: Start

Description

Autoproxy Detection with SWPAD UNKNOWN started.

Message #

Autoproxy Detection with SWPAD UNKNOWN started

Event ID 827 — Autoproxy Detection with SWPAD UNKNOWN stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_UNKNOWN_DETECTION
Opcode: Stop

Description

Autoproxy Detection with SWPAD UNKNOWN stopped.

Message #

Autoproxy Detection with SWPAD UNKNOWN stopped

Event ID 828 — Autoproxy Script Download Started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_SCRIPT_DOWNLOAD
Opcode: Start

Description

Autoproxy Script Download Started.

Message #

Autoproxy Script Download Started

Event ID 829 — Autoproxy Script Download Stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_SCRIPT_DOWNLOAD
Opcode: Stop

Description

Autoproxy Script Download Stopped.

Message #

Autoproxy Script Download Stopped

Event ID 834 — Autoproxy full scenario started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_ALL
Opcode: Start

Description

Autoproxy full scenario started.

Message #

Autoproxy full scenario started

Fields #

Name	Description
`UniqueId` UInt32	—

Event ID 835 — Autoproxy full scenario stopped

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_AUTOPROXY_PERFTRACK_ALL
Opcode: Stop

Description

Autoproxy full scenario stopped.

Message #

Autoproxy full scenario stopped

Fields #

Name	Description
`UniqueId` UInt32	—

Event ID 901 — Application offline check started

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_APPLICATION_OFFLINE_CHECK
Opcode: Start

Description

Application offline check started.

Message #

Application offline check started

Fields #

Name	Description
`AppPackageSid` UnicodeString	—

Event ID 902 — Application offline check complete

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_APPLICATION_OFFLINE_CHECK
Opcode: Stop

Description

Application offline check complete.

Message #

Application offline check complete

Fields #

Name	Description
`Result` UInt32	—
`Offline` Boolean	—

Event ID 1000 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_TEST_EVENT

Fields #

Name	Description
`_TestStr0Length` UInt8	—
`TestStr0` AnsiString	—
`_TestStr1Length` UInt16	—
`TestStr1` AnsiString	—
`_TestStr2Length` UInt32	—
`TestStr2` AnsiString	—
`_TestStr0WLength` UInt8	—
`TestStr0W` UnicodeString	—
`_TestStr1WLength` UInt16	—
`TestStr1W` UnicodeString	—
`_TestStr2WLength` UInt32	—
`TestStr2W` UnicodeString	—
`TestStrLength` UInt16	—
`TestStr` AnsiString	—
`TestStrWLength` UInt16	—
`TestStrW` UnicodeString	—

Event ID 1007 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SendRequest
Opcode: Start

Fields #

Name	Description
`Request` Pointer	—
`AddressName` AnsiString	—

Event ID 1008 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SendRequest
Opcode: Stop

Fields #

Name	Description
`Request` Pointer	—
`StatusLineLength` UInt32	—
`StatusLine` AnsiString	—

Event ID 1009 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_OfflineCacheLookup

Fields #

Name	Description
`Request` Pointer	—

Event ID 1011 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_OfflineCacheHit

Fields #

Name	Description
`Request` Pointer	—

Event ID 1013 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_OfflineCacheMiss

Fields #

Name	Description
`Request` Pointer	—

Event ID 1015 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_PreNet_CacheLookup

Fields #

Name	Description
`Request` Pointer	—

Event ID 1017 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_PreNet_CacheHit

Fields #

Name	Description
`Request` Pointer	—

Event ID 1019 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_PreNet_CacheMiss

Fields #

Name	Description
`Request` Pointer	—

Event ID 1021 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_PostNet_CacheLookup

Fields #

Name	Description
`Request` Pointer	—

Event ID 1023 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_PostNet_CacheHit

Fields #

Name	Description
`Request` Pointer	—

Event ID 1025 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_PostNet_CacheMiss

Fields #

Name	Description
`Request` Pointer	—

Event ID 1027 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AutodialIfNotLocalHost
Opcode: Start

Fields #

Name	Description
`Request` Pointer	—
`HostName` AnsiString	—

Event ID 1028 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AutodialIfNotLocalHost
Opcode: Stop

Fields #

Name	Description
`Request` Pointer	—

Event ID 1029 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_ResolveHost
Opcode: Start

Fields #

Name	Description
`Request` Pointer	—
`HostName` AnsiString	—

Event ID 1030 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_ResolveHost
Opcode: Stop

Fields #

Name	Description
`Request` Pointer	—
`HostName` AnsiString	—

Event ID 1031 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SendRequest_Main

Fields #

Name	Description
`Request` Pointer	—
`Size` UInt32	—

Event ID 1033 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SendRequest_Extra

Fields #

Name	Description
`Request` Pointer	—
`Size` UInt32	—

Event ID 1035 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SendRequest_CRLF

Fields #

Name	Description
`Request` Pointer	—
`Size` UInt32	—

Event ID 1037 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_ReadData

Fields #

Name	Description
`Request` Pointer	—
`Size` UInt32	—

Event ID 1039 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_ReadDataPostReceiveBuf

Fields #

Name	Description
`Request` Pointer	—
`Size` UInt32	—

Event ID 1041 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SendRequest_PostReceiveBuf

Fields #

Name	Description
`Request` Pointer	—
`Size` UInt32	—

Event ID 1043 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DrainResponsePostReceiveBuf

Fields #

Name	Description
`Request` Pointer	—
`Size` UInt32	—

Event ID 1045 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Connect
Opcode: Start

Fields #

Name	Description
`Request` Pointer	—

Event ID 1046 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Connect
Opcode: Stop

Fields #

Name	Description
`Request` Pointer	—
`Socket` UInt32	—
`Protocol` UInt32	— Known values `0` HOPOPT `1` ICMP `2` IGMP `6` TCP `17` UDP `41` IPv6 `43` IPv6-Route `44` IPv6-Frag `47` GRE `50` ESP `51` AH `58` ICMPv6 `89` OSPF `103` PIM `132` SCTP
`LocalAddressLength` UInt32	—
`LocalAddress` Binary	—
`RemoteAddressLength` UInt32	—
`RemoteAddress` Binary	—

Event ID 1047 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_LookupConnection
Opcode: Start

Fields #

Name	Description
`Request` Pointer	—

Event ID 1048 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_LookupConnection
Opcode: Stop

Fields #

Name	Description
`Request` Pointer	—
`Socket` UInt32	—

Event ID 1049 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Redirect

Fields #

Name	Description
`Request` Pointer	—
`AddressName` AnsiString	—

Event ID 1051 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Getaddrinfo
Opcode: Start

Fields #

Name	Description
`Flags` UInt32	—
`AddressName` AnsiString	—

Event ID 1052 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Getaddrinfo
Opcode: Stop

Fields #

Name	Description
`error` UInt32	—
`Flags` UInt32	—
`AddressName` AnsiString	—

Event ID 1053 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DHCP_I252WPAD
Opcode: Start

Fields #

Name	Description
`Order` UInt32	—
`AddressName` AnsiString	—

Event ID 1054 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DHCP_I252WPAD
Opcode: Stop

Fields #

Name	Description
`error` UInt32	—
`AddressName` AnsiString	—

Event ID 1055 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Select
Opcode: Start

Fields #

Name	Description
`Request` Pointer	—
`Flags` UInt32	—

Event ID 1056 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_Select
Opcode: Stop

Fields #

Name	Description
`Request` Pointer	—
`Flags` UInt32	—

Event ID 1057 — Requested URL=URL Verb=Verb RequestHeaders=RequestHeaders ResponseHeaders=ResponseHeaders Status=Status Cache=UsageLogRequestCache.

Provider: Microsoft-Windows-WinINet
Channel: UsageLog
Task: Wininet_UsageLogRequest

Description

Requested URL=URL Verb=Verb RequestHeaders=RequestHeaders ResponseHeaders=ResponseHeaders Status=Status Cache=UsageLogRequestCache.

Message #

Requested URL=%1 Verb=%2 RequestHeaders=%3 ResponseHeaders=%4 Status=%5 Cache=%6

Fields #

Name	Description
`URL` AnsiString	—
`Verb` AnsiString	—
`RequestHeaders` AnsiString	—
`ResponseHeaders` AnsiString	—
`Status` UInt32	— NTSTATUS reference
`UsageLogRequestCache` UInt32	—

Event ID 1058 — Scavenged URL=URL.

Provider: Microsoft-Windows-WinINet
Channel: UsageLog
Task: Wininet_UsageLogScavenge

Description

Scavenged URL=URL.

Message #

Scavenged URL=%1

Fields #

Name	Description
`URL` AnsiString	—

Event ID 1059 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SocketConnect
Opcode: Start

Fields #

Name	Description
`Request` Pointer	—
`Socket` UInt32	—
`SourcePort` UInt32	—
`RemoteAddressIndex` UInt32	—

Event ID 1060 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SocketConnect
Opcode: Stop

Fields #

Name	Description
`Request` Pointer	—
`Socket` UInt32	—

Event ID 1061 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheLookup
Opcode: Start

Fields #

Name	Description
`URL` UnicodeString	—

Event ID 1062 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheLookup
Opcode: Stop

Fields #

Name	Description
`ManifestURL` UnicodeString	—

Event ID 1063 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_RequestPrioritySet

Fields #

Name	Description
`Request` Pointer	—
`OldPriority` Int32	—
`NewPriority` Int32	—

Event ID 1064 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: WININET_STREAM_DATA_INDICATED

Fields #

Name	Description
`RequestHandle` Pointer	—
`StreamId` UInt32	—
`Size` UInt32	—
`Headers` Boolean	—

Event ID 1065 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SecurityContext
Opcode: Start

Fields #

Name	Description
`Context` Pointer	—
`HostName` AnsiString	—
`NegotiationCount` UInt32	—
`Socket` UInt32	—

Event ID 1066 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SecurityContext
Opcode: Stop

Fields #

Name	Description
`Context` Pointer	—
`HostName` AnsiString	—
`NegotiationCount` UInt32	—
`Socket` UInt32	—
`Status` UInt32	— NTSTATUS reference

Event ID 1067 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SocketReceiveDelay
Opcode: Start

Fields #

Name	Description
`Request` Pointer	—
`Socket` UInt32	—

Event ID 1068 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SocketReceiveDelay
Opcode: Stop

Fields #

Name	Description
`Request` Pointer	—
`Socket` UInt32	—

Event ID 1069 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_FileIO
Opcode: Start

Fields #

Name	Description
`Handle` Pointer	—
`Operation` UInt32	— Known values `%%2456` Open key file. `%%2457` Delete key file. `%%2458` Read persisted key from file. `%%2459` Write persisted key to file. `%%2464` Export of persistent cryptographic key. `%%2465` Import of persistent cryptographic key. `%%2480` Open Key. `%%2481` Create Key. `%%2482` Delete Key. `%%2483` Encrypt. `%%2484` Decrypt. `%%2485` Sign hash. `%%2486` Secret agreement. `%%2487` Domain settings. `%%2488` Local settings. `%%2489` Add provider. `%%2490` Remove provider. `%%2491` Add context. `%%2492` Remove context. `%%2493` Add function. `%%2494` Remove function. `%%2495` Add function provider. `%%2496` Remove function provider. `%%2497` Add function property. `%%2498` Remove function property. `%%2499` Machine key. `%%2500` User key. `%%2501` Key Derivation. `%%2502` Claim Creation. `%%2503` Claim Verification.
`ClientType` UInt32	—
`ThreadInfoUIType` UInt32	—
`IsSync` Boolean	—

Event ID 1070 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_FileIO
Opcode: Stop

Fields #

Name	Description
`Handle` Pointer	—
`Operation` UInt32	— Known values `%%2456` Open key file. `%%2457` Delete key file. `%%2458` Read persisted key from file. `%%2459` Write persisted key to file. `%%2464` Export of persistent cryptographic key. `%%2465` Import of persistent cryptographic key. `%%2480` Open Key. `%%2481` Create Key. `%%2482` Delete Key. `%%2483` Encrypt. `%%2484` Decrypt. `%%2485` Sign hash. `%%2486` Secret agreement. `%%2487` Domain settings. `%%2488` Local settings. `%%2489` Add provider. `%%2490` Remove provider. `%%2491` Add context. `%%2492` Remove context. `%%2493` Add function. `%%2494` Remove function. `%%2495` Add function provider. `%%2496` Remove function provider. `%%2497` Add function property. `%%2498` Remove function property. `%%2499` Machine key. `%%2500` User key. `%%2501` Key Derivation. `%%2502` Claim Creation. `%%2503` Claim Verification.
`ClientType` UInt32	—
`ThreadInfoUIType` UInt32	—
`IsSync` Boolean	—

Event ID 1071 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_FileIO
Opcode: Start

Fields #

Name	Description
`Handle` Pointer	—
`Operation` UInt32	— Known values `%%2456` Open key file. `%%2457` Delete key file. `%%2458` Read persisted key from file. `%%2459` Write persisted key to file. `%%2464` Export of persistent cryptographic key. `%%2465` Import of persistent cryptographic key. `%%2480` Open Key. `%%2481` Create Key. `%%2482` Delete Key. `%%2483` Encrypt. `%%2484` Decrypt. `%%2485` Sign hash. `%%2486` Secret agreement. `%%2487` Domain settings. `%%2488` Local settings. `%%2489` Add provider. `%%2490` Remove provider. `%%2491` Add context. `%%2492` Remove context. `%%2493` Add function. `%%2494` Remove function. `%%2495` Add function provider. `%%2496` Remove function provider. `%%2497` Add function property. `%%2498` Remove function property. `%%2499` Machine key. `%%2500` User key. `%%2501` Key Derivation. `%%2502` Claim Creation. `%%2503` Claim Verification.
`ClientType` UInt32	—
`ThreadInfoUIType` UInt32	—
`IsSync` Boolean	—
`DataLength` UInt32	—

Event ID 1072 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_FileIO
Opcode: Stop

Fields #

Name	Description
`Handle` Pointer	—
`Operation` UInt32	— Known values `%%2456` Open key file. `%%2457` Delete key file. `%%2458` Read persisted key from file. `%%2459` Write persisted key to file. `%%2464` Export of persistent cryptographic key. `%%2465` Import of persistent cryptographic key. `%%2480` Open Key. `%%2481` Create Key. `%%2482` Delete Key. `%%2483` Encrypt. `%%2484` Decrypt. `%%2485` Sign hash. `%%2486` Secret agreement. `%%2487` Domain settings. `%%2488` Local settings. `%%2489` Add provider. `%%2490` Remove provider. `%%2491` Add context. `%%2492` Remove context. `%%2493` Add function. `%%2494` Remove function. `%%2495` Add function provider. `%%2496` Remove function provider. `%%2497` Add function property. `%%2498` Remove function property. `%%2499` Machine key. `%%2500` User key. `%%2501` Key Derivation. `%%2502` Claim Creation. `%%2503` Claim Verification.
`ClientType` UInt32	—
`ThreadInfoUIType` UInt32	—
`IsSync` Boolean	—

Event ID 1073 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—
`LocalFileName` UnicodeString	—

Event ID 1074 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1075 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Handle` Pointer	—
`Url` UnicodeString	—

Event ID 1076 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1077 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Handle` Pointer	—
`Url` UnicodeString	—

Event ID 1078 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1079 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`DataSize` UInt32	—

Event ID 1080 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1081 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1082 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1083 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—

Event ID 1084 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1085 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1086 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1087 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1088 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheHandle
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1089 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Handle` Pointer	—
`Directory` UnicodeString	—
`IsIEAppContainer` Boolean	—

Event ID 1090 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1091 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1092 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1093 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1094 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1095 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—

Event ID 1096 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1097 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—

Event ID 1098 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1099 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—
`Flags` UInt32	—

Event ID 1100 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1101 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`MasterUrl` UnicodeString	—
`ManifestURL` UnicodeString	—
`DataSize` UInt32	—
`EntryType` UInt32	—
`HeaderSize` UInt32	—

Event ID 1102 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1103 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1104 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1105 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1106 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1107 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1108 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1109 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1110 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_AppCacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1111 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Handle` Pointer	—
`Directory` UnicodeString	—

Event ID 1112 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1113 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1114 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1115 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1116 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1117 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—

Event ID 1118 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1119 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—

Event ID 1120 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1121 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—

Event ID 1122 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1123 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1124 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_BlobServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1125 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheClientBloomFilter
Opcode: Start

Fields #

Name	Description
`Handle` Pointer	—

Event ID 1126 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheClientBloomFilter
Opcode: Stop

Fields #

Name	Description
`HResult` UInt32	—

Event ID 1127 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheClientBloomFilter
Opcode: Start

Event ID 1128 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheClientBloomFilter
Opcode: Stop

Event ID 1129 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Handle` Pointer	—
`Directory` UnicodeString	—

Event ID 1130 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1131 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1132 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1133 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`MinimizedRDomain` UnicodeString	—

Event ID 1134 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1135 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1136 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1137 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Hash` Int64	—
`OperationCount` UInt32	—

Event ID 1138 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1139 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1140 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CookieServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1141 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheClientCounters
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Handle` Pointer	—

Event ID 1142 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheClientCounters
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1143 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—
`BlobSize` UInt32	—

Event ID 1144 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1145 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—

Event ID 1146 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1147 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1148 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1149 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Handle` Pointer	—
`IsCreateContainer` Boolean	—
`Directory` UnicodeString	—

Event ID 1150 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1151 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1152 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_DependencyServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1153 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Handle` Pointer	—
`Directory` UnicodeString	—

Event ID 1154 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1155 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1156 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1157 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`MinimizedRDomain` UnicodeString	—
`Hash` Int64	—

Event ID 1158 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1159 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Hash` Int64	—
`HstsEntryCount` UInt32	—

Event ID 1160 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1161 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1162 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_HstsServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1163 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerConnection
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1164 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerConnection
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1165 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerConnection
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Handle` Pointer	—

Event ID 1166 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerConnection
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1167 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerEntryEnum
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1168 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerEntryEnum
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1169 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerEntryEnum
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Handle` Pointer	—
`Filter` UInt32	—
`GroupId` Int64	—

Event ID 1170 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerEntryEnum
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1171 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerEntryEnum
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1172 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerEntryEnum
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1173 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`EntryMaxAge` UInt32	—

Event ID 1174 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1175 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Type` UInt32	—
`Flags` UInt32	—
`Url` UnicodeString	—
`Redirect` UnicodeString	—
`Filename` UnicodeString	—
`Extension` UnicodeString	—

Event ID 1176 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1177 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—
`ValidateCreationTime` Boolean	—

Event ID 1178 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1179 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—
`Flags` UInt32	—

Event ID 1180 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1181 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1182 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1183 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—

Event ID 1184 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1185 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—
`Type` UInt32	—

Event ID 1186 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1187 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—

Event ID 1188 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1189 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—
`Fields` UInt32	—

Event ID 1190 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1191 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1192 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1193 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1194 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1195 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Limit` Int64	—

Event ID 1196 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1197 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Factor` UInt32	—
`Filter` UInt32	—

Event ID 1198 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1199 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1200 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1201 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1202 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1203 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Filename` UnicodeString	—

Event ID 1204 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1205 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Flags` UInt32	—

Event ID 1206 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1207 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`GroupId` Int64	—
`Flags` UInt32	—

Event ID 1208 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1209 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1210 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1211 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`GroupId` Int64	—

Event ID 1212 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1213 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`GroupId` Int64	—
`Flags` UInt32	—

Event ID 1214 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1215 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Url` UnicodeString	—
`GroupId` Int64	—
`Flags` UInt32	—

Event ID 1216 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1217 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—
`Handle` Pointer	—
`Name` UnicodeString	—
`Directory` UnicodeString	—
`Flags` UInt32	—
`Limit` Int64	—
`EntryMaxAge` UInt32	—

Event ID 1218 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1219 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Start

Fields #

Name	Description
`Object` Pointer	—

Event ID 1220 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_CacheServerContainer
Opcode: Stop

Fields #

Name	Description
`Object` Pointer	—
`HResult` UInt32	—

Event ID 1221 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Fields #

Name	Description
`TargetSize` Int64	—
`Filter` UInt32	—

Event ID 1222 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Fields #

Name	Description
`TargetSize` Int64	—
`Filter` UInt32	—

Event ID 1223 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Event ID 1224 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Event ID 1225 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Event ID 1226 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Event ID 1227 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Fields #

Name	Description
`Name` UnicodeString	—
`Prefix` UnicodeString	—
`Directory` UnicodeString	—
`RootPath` UnicodeString	—
`Limit` Int64	—
`Options` UInt32	—

Event ID 1228 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Fields #

Name	Description
`Name` UnicodeString	—
`Prefix` UnicodeString	—
`Directory` UnicodeString	—
`RootPath` UnicodeString	—
`Limit` Int64	—
`Options` UInt32	—

Event ID 1229 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Fields #

Name	Description
`Name` UnicodeString	—
`RootPath` UnicodeString	—

Event ID 1230 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Fields #

Name	Description
`Name` UnicodeString	—
`RootPath` UnicodeString	—

Event ID 1231 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Fields #

Name	Description
`RootPath` UnicodeString	—

Event ID 1232 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Fields #

Name	Description
`RootPath` UnicodeString	—

Event ID 1233 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Fields #

Name	Description
`LimitType` UInt32	—
`Limit` Int64	—

Event ID 1234 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Fields #

Name	Description
`LimitType` UInt32	—
`Limit` Int64	—

Event ID 1235 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Fields #

Name	Description
`LimitType` UInt32	—

Event ID 1236 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Fields #

Name	Description
`LimitType` UInt32	—

Event ID 1237 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Start

Event ID 1238 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_UrlCacheContainer
Opcode: Stop

Event ID 1239 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncInternetOpen

Event ID 1240 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncSendRequest
Opcode: Start

Event ID 1241 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncSendRequest
Opcode: Stop

Event ID 1242 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncQueryDataAvailable
Opcode: Start

Event ID 1243 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncQueryDataAvailable
Opcode: Stop

Event ID 1244 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncReadFile
Opcode: Start

Event ID 1245 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncReadFile
Opcode: Stop

Event ID 1246 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncWriteFile
Opcode: Start

Event ID 1247 —

Provider: Microsoft-Windows-WinINet
Channel: Analytic
Task: Wininet_SyncWriteFile
Opcode: Stop