MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403693Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 10:03:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403692Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 10:01:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 89963C8A-2EFD-4758-A1AD-705FAA7D4923--20821540-EA44-469D-B0AA-28212400F665 (Friendly Name: a95bd60f-d949-43c2-9346-3997d3efbc6e).2330400-92233720368547758083691Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42043632nch1-master-1.nc-master-1.localS-1-5-83-1-2308324490-1196961533-1601220001-5920188583/26/2022 10:00:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 89963C8A-2EFD-4758-A1AD-705FAA7D4923--20821540-EA44-469D-B0AA-28212400F665 successfully disconnected from port .2340400-92233720368547758083690Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42043632nch1-master-1.nc-master-1.localS-1-5-83-1-2308324490-1196961533-1601220001-5920188583/26/2022 10:00:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403689Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 9:59:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 89963C8A-2EFD-4758-A1AD-705FAA7D4923--20821540-EA44-469D-B0AA-28212400F665 (Friendly Name: a95bd60f-d949-43c2-9346-3997d3efbc6e) successfully connected to port F3FE7B79-61B7-4A15-9408-E7CF0DCDF343 (Friendly Name: a95bd60f-d949-43c2-9346-3997d3efbc6e) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083688Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42045336nch1-master-1.nc-master-1.localS-1-5-83-1-2308324490-1196961533-1601220001-5920188583/26/2022 9:56:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 89963C8A-2EFD-4758-A1AD-705FAA7D4923--20821540-EA44-469D-B0AA-28212400F665 (Friendly Name: ).2330400-92233720368547758083687Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42045336nch1-master-1.nc-master-1.local3/26/2022 9:56:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403686Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045956nch1-master-1.nc-master-1.local3/26/2022 9:56:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403685Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045956nch1-master-1.nc-master-1.local3/26/2022 9:54:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 485715E5-ECCB-4576-841B-FC2497BE7267--F0EFAB4F-C61E-469B-9965-FEE28100B676 (Friendly Name: 94ea6a56-4477-4271-9344-cff1ac399553).2330400-92233720368547758083684Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53402888nch1-master-1.nc-master-1.localS-1-5-83-1-1213666789-1165421771-620501892-17355731433/26/2022 9:54:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 485715E5-ECCB-4576-841B-FC2497BE7267--F0EFAB4F-C61E-469B-9965-FEE28100B676 successfully disconnected from port .2340400-92233720368547758083683Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53402888nch1-master-1.nc-master-1.localS-1-5-83-1-1213666789-1165421771-620501892-17355731433/26/2022 9:54:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403682Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041252nch1-master-1.nc-master-1.local3/26/2022 9:53:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 485715E5-ECCB-4576-841B-FC2497BE7267--F0EFAB4F-C61E-469B-9965-FEE28100B676 (Friendly Name: 94ea6a56-4477-4271-9344-cff1ac399553) successfully connected to port EC7EA535-F96C-4E82-8134-BB5740980F43 (Friendly Name: 94ea6a56-4477-4271-9344-cff1ac399553) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083681Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53405636nch1-master-1.nc-master-1.localS-1-5-83-1-1213666789-1165421771-620501892-17355731433/26/2022 9:51:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 485715E5-ECCB-4576-841B-FC2497BE7267--F0EFAB4F-C61E-469B-9965-FEE28100B676 (Friendly Name: ).2330400-92233720368547758083680Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53405636nch1-master-1.nc-master-1.local3/26/2022 9:51:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403679Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045956nch1-master-1.nc-master-1.local3/26/2022 9:51:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403678Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045956nch1-master-1.nc-master-1.local3/26/2022 9:51:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403677Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045956nch1-master-1.nc-master-1.local3/26/2022 9:50:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 4885A4FF-339F-4F0A-9C26-F86FDFFF0AB5--693F27B4-B17C-4C9C-BDCC-E5C2BA3BB918 (Friendly Name: 6001885e-afe7-4bdd-9b17-e95872fb5d9c).2330400-92233720368547758083676Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60564728nch1-master-1.nc-master-1.localS-1-5-83-1-1216718079-1326068639-1878533788-30373969593/26/2022 9:49:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4885A4FF-339F-4F0A-9C26-F86FDFFF0AB5--693F27B4-B17C-4C9C-BDCC-E5C2BA3BB918 successfully disconnected from port .2340400-92233720368547758083675Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60564728nch1-master-1.nc-master-1.localS-1-5-83-1-1216718079-1326068639-1878533788-30373969593/26/2022 9:49:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4885A4FF-339F-4F0A-9C26-F86FDFFF0AB5--693F27B4-B17C-4C9C-BDCC-E5C2BA3BB918 (Friendly Name: 6001885e-afe7-4bdd-9b17-e95872fb5d9c) successfully connected to port 0177D496-59CF-46C0-B6BD-46D41862A28F (Friendly Name: 6001885e-afe7-4bdd-9b17-e95872fb5d9c) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083674Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60564728nch1-master-1.nc-master-1.localS-1-5-83-1-1216718079-1326068639-1878533788-30373969593/26/2022 9:47:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 4885A4FF-339F-4F0A-9C26-F86FDFFF0AB5--693F27B4-B17C-4C9C-BDCC-E5C2BA3BB918 (Friendly Name: ).2330400-92233720368547758083673Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60564728nch1-master-1.nc-master-1.local3/26/2022 9:47:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403672Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043204nch1-master-1.nc-master-1.local3/26/2022 9:47:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403671Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043204nch1-master-1.nc-master-1.local3/26/2022 9:47:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2B3BB7FD-464D-4781-9D25-657DF00711A3--39750D76-5099-4E69-9F68-0AB3EBDB7543 (Friendly Name: 7a14f006-13f4-4444-8ba5-9b6ef1a8a1e4).2330400-92233720368547758083670Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38523360nch1-master-1.nc-master-1.localS-1-5-83-1-725334013-1199654477-2103780765-27358023523/26/2022 9:46:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2B3BB7FD-464D-4781-9D25-657DF00711A3--39750D76-5099-4E69-9F68-0AB3EBDB7543 successfully disconnected from port .2340400-92233720368547758083669Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38523360nch1-master-1.nc-master-1.localS-1-5-83-1-725334013-1199654477-2103780765-27358023523/26/2022 9:46:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403668Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043204nch1-master-1.nc-master-1.local3/26/2022 9:46:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2B3BB7FD-464D-4781-9D25-657DF00711A3--39750D76-5099-4E69-9F68-0AB3EBDB7543 (Friendly Name: 7a14f006-13f4-4444-8ba5-9b6ef1a8a1e4) successfully connected to port 88549578-E262-4CF8-8B6C-27F18B3562FD (Friendly Name: 7a14f006-13f4-4444-8ba5-9b6ef1a8a1e4) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083667Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38524328nch1-master-1.nc-master-1.localS-1-5-83-1-725334013-1199654477-2103780765-27358023523/26/2022 9:45:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2B3BB7FD-464D-4781-9D25-657DF00711A3--39750D76-5099-4E69-9F68-0AB3EBDB7543 (Friendly Name: ).2330400-92233720368547758083666Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38524328nch1-master-1.nc-master-1.local3/26/2022 9:45:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403665Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043204nch1-master-1.nc-master-1.local3/26/2022 9:45:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2B3BB7FD-464D-4781-9D25-657DF00711A3--39750D76-5099-4E69-9F68-0AB3EBDB7543 (Friendly Name: 7a14f006-13f4-4444-8ba5-9b6ef1a8a1e4).2330400-92233720368547758083664Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26405492nch1-master-1.nc-master-1.localS-1-5-83-1-725334013-1199654477-2103780765-27358023523/26/2022 9:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2B3BB7FD-464D-4781-9D25-657DF00711A3--39750D76-5099-4E69-9F68-0AB3EBDB7543 successfully disconnected from port .2340400-92233720368547758083663Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26405492nch1-master-1.nc-master-1.localS-1-5-83-1-725334013-1199654477-2103780765-27358023523/26/2022 9:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2B3BB7FD-464D-4781-9D25-657DF00711A3--39750D76-5099-4E69-9F68-0AB3EBDB7543 (Friendly Name: 7a14f006-13f4-4444-8ba5-9b6ef1a8a1e4) successfully connected to port 88549578-E262-4CF8-8B6C-27F18B3562FD (Friendly Name: 7a14f006-13f4-4444-8ba5-9b6ef1a8a1e4) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083662Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26405492nch1-master-1.nc-master-1.localS-1-5-83-1-725334013-1199654477-2103780765-27358023523/26/2022 9:44:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2B3BB7FD-464D-4781-9D25-657DF00711A3--39750D76-5099-4E69-9F68-0AB3EBDB7543 (Friendly Name: ).2330400-92233720368547758083661Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26405492nch1-master-1.nc-master-1.local3/26/2022 9:44:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 176E9B57-1A30-4B7F-B6D1-74988228C634--F2ECA30B-D6EC-4451-9610-8296AFF41B1A (Friendly Name: 52b6dc59-4403-42f1-9a0f-d45c6ffd93a9).2330400-92233720368547758083660Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3392932nch1-master-1.nc-master-1.localS-1-5-83-1-393124695-1266620976-2557792694-8854017303/26/2022 9:43:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 176E9B57-1A30-4B7F-B6D1-74988228C634--F2ECA30B-D6EC-4451-9610-8296AFF41B1A successfully disconnected from port .2340400-92233720368547758083659Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3392932nch1-master-1.nc-master-1.localS-1-5-83-1-393124695-1266620976-2557792694-8854017303/26/2022 9:43:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 176E9B57-1A30-4B7F-B6D1-74988228C634--F2ECA30B-D6EC-4451-9610-8296AFF41B1A (Friendly Name: 52b6dc59-4403-42f1-9a0f-d45c6ffd93a9) successfully connected to port 5B18D902-7BB4-404E-A241-B871D64D5957 (Friendly Name: 52b6dc59-4403-42f1-9a0f-d45c6ffd93a9) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083658Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33924596nch1-master-1.nc-master-1.localS-1-5-83-1-393124695-1266620976-2557792694-8854017303/26/2022 9:42:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 176E9B57-1A30-4B7F-B6D1-74988228C634--F2ECA30B-D6EC-4451-9610-8296AFF41B1A (Friendly Name: ).2330400-92233720368547758083657Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33924596nch1-master-1.nc-master-1.local3/26/2022 9:42:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403656Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043204nch1-master-1.nc-master-1.local3/26/2022 9:42:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403655Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043204nch1-master-1.nc-master-1.local3/26/2022 9:40:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403654Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045956nch1-master-1.nc-master-1.local3/26/2022 9:39:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6C6FA32D-1A3D-486B-838E-A16DE0CA8DC0--9D47BF8A-4125-4F74-8C84-9471CD0D08FE (Friendly Name: caef9b55-704e-4694-bfa6-9d72c89b16ac).2330400-92233720368547758083653Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61123628nch1-master-1.nc-master-1.localS-1-5-83-1-1819255597-1214978621-1839304323-32305179843/26/2022 9:39:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6C6FA32D-1A3D-486B-838E-A16DE0CA8DC0--9D47BF8A-4125-4F74-8C84-9471CD0D08FE successfully disconnected from port .2340400-92233720368547758083652Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61123628nch1-master-1.nc-master-1.localS-1-5-83-1-1819255597-1214978621-1839304323-32305179843/26/2022 9:39:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6C6FA32D-1A3D-486B-838E-A16DE0CA8DC0--9D47BF8A-4125-4F74-8C84-9471CD0D08FE (Friendly Name: caef9b55-704e-4694-bfa6-9d72c89b16ac) successfully connected to port CD080FD4-1F04-4726-91E2-A46A1CF02E73 (Friendly Name: caef9b55-704e-4694-bfa6-9d72c89b16ac) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083651Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61123096nch1-master-1.nc-master-1.localS-1-5-83-1-1819255597-1214978621-1839304323-32305179843/26/2022 9:38:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6C6FA32D-1A3D-486B-838E-A16DE0CA8DC0--9D47BF8A-4125-4F74-8C84-9471CD0D08FE (Friendly Name: ).2330400-92233720368547758083650Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61123096nch1-master-1.nc-master-1.local3/26/2022 9:38:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6C6FA32D-1A3D-486B-838E-A16DE0CA8DC0--9D47BF8A-4125-4F74-8C84-9471CD0D08FE (Friendly Name: caef9b55-704e-4694-bfa6-9d72c89b16ac).2330400-92233720368547758083649Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55244880nch1-master-1.nc-master-1.localS-1-5-83-1-1819255597-1214978621-1839304323-32305179843/26/2022 9:38:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6C6FA32D-1A3D-486B-838E-A16DE0CA8DC0--9D47BF8A-4125-4F74-8C84-9471CD0D08FE successfully disconnected from port .2340400-92233720368547758083648Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55244880nch1-master-1.nc-master-1.localS-1-5-83-1-1819255597-1214978621-1839304323-32305179843/26/2022 9:38:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6C6FA32D-1A3D-486B-838E-A16DE0CA8DC0--9D47BF8A-4125-4F74-8C84-9471CD0D08FE (Friendly Name: caef9b55-704e-4694-bfa6-9d72c89b16ac) successfully connected to port CD080FD4-1F04-4726-91E2-A46A1CF02E73 (Friendly Name: caef9b55-704e-4694-bfa6-9d72c89b16ac) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083647Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55244880nch1-master-1.nc-master-1.localS-1-5-83-1-1819255597-1214978621-1839304323-32305179843/26/2022 9:37:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6C6FA32D-1A3D-486B-838E-A16DE0CA8DC0--9D47BF8A-4125-4F74-8C84-9471CD0D08FE (Friendly Name: ).2330400-92233720368547758083646Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55244880nch1-master-1.nc-master-1.local3/26/2022 9:37:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A113DEEA-5B70-447E-BBAB-23F3F5FB48D2--AEF7FF4F-EAA9-4A76-A2B7-50DF4918B3AB (Friendly Name: 69dfdada-8996-47cb-a65b-7c951d8d9343).2330400-92233720368547758083645Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52485364nch1-master-1.nc-master-1.localS-1-5-83-1-2702434026-1149131632-4079201211-35279984533/26/2022 9:36:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A113DEEA-5B70-447E-BBAB-23F3F5FB48D2--AEF7FF4F-EAA9-4A76-A2B7-50DF4918B3AB successfully disconnected from port .2340400-92233720368547758083644Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52485364nch1-master-1.nc-master-1.localS-1-5-83-1-2702434026-1149131632-4079201211-35279984533/26/2022 9:36:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A113DEEA-5B70-447E-BBAB-23F3F5FB48D2--AEF7FF4F-EAA9-4A76-A2B7-50DF4918B3AB (Friendly Name: 69dfdada-8996-47cb-a65b-7c951d8d9343) successfully connected to port F81641A1-AE88-4FE9-8E72-53DCE1A88E37 (Friendly Name: 69dfdada-8996-47cb-a65b-7c951d8d9343) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083643Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52485356nch1-master-1.nc-master-1.localS-1-5-83-1-2702434026-1149131632-4079201211-35279984533/26/2022 9:36:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A113DEEA-5B70-447E-BBAB-23F3F5FB48D2--AEF7FF4F-EAA9-4A76-A2B7-50DF4918B3AB (Friendly Name: ).2330400-92233720368547758083642Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52485356nch1-master-1.nc-master-1.local3/26/2022 9:36:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3FC4523F-4504-41E4-BC81-4419B5C031AF--31324786-1698-428E-B892-A4C01093C0FC (Friendly Name: 5942c052-bdf2-4989-8332-b191744ebba7).2330400-92233720368547758083641Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36321056nch1-master-1.nc-master-1.localS-1-5-83-1-1069830719-1105478916-423920060-29392733973/26/2022 9:36:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3FC4523F-4504-41E4-BC81-4419B5C031AF--31324786-1698-428E-B892-A4C01093C0FC successfully disconnected from port .2340400-92233720368547758083640Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36321056nch1-master-1.nc-master-1.localS-1-5-83-1-1069830719-1105478916-423920060-29392733973/26/2022 9:36:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-88-A2-54 has moved from port D94A6E87-EC09-432D-89C6-D390138350EB (Friendly Name: 5942c052-bdf2-4989-8332-b191744ebba7) to port D94A6E87-EC09-432D-89C6-D390138350EB (Friendly Name: 5942c052-bdf2-4989-8332-b191744ebba7).250410180-92233720368547758083639Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24683828nch1-master-1.nc-master-1.local3/26/2022 9:36:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3FC4523F-4504-41E4-BC81-4419B5C031AF--31324786-1698-428E-B892-A4C01093C0FC (Friendly Name: 5942c052-bdf2-4989-8332-b191744ebba7) successfully connected to port D94A6E87-EC09-432D-89C6-D390138350EB (Friendly Name: 5942c052-bdf2-4989-8332-b191744ebba7) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083638Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36325204nch1-master-1.nc-master-1.localS-1-5-83-1-1069830719-1105478916-423920060-29392733973/26/2022 9:36:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3FC4523F-4504-41E4-BC81-4419B5C031AF--31324786-1698-428E-B892-A4C01093C0FC (Friendly Name: ).2330400-92233720368547758083637Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36322760nch1-master-1.nc-master-1.local3/26/2022 9:36:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 8AB6039A-000A-4940-878D-B5C5C42FE86A--E1EB7EBE-A122-40DF-8027-671CADB992D6 (Friendly Name: 5942c052-bdf2-4989-8332-b191744ebba7).2330400-92233720368547758083636Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8286044nch1-master-1.nc-master-1.localS-1-5-83-1-2327184282-1228931082-3317009799-17936014763/26/2022 9:36:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8AB6039A-000A-4940-878D-B5C5C42FE86A--E1EB7EBE-A122-40DF-8027-671CADB992D6 successfully disconnected from port .2340400-92233720368547758083635Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8286044nch1-master-1.nc-master-1.localS-1-5-83-1-2327184282-1228931082-3317009799-17936014763/26/2022 9:36:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403634Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.local3/26/2022 9:35:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8AB6039A-000A-4940-878D-B5C5C42FE86A--E1EB7EBE-A122-40DF-8027-671CADB992D6 (Friendly Name: 5942c052-bdf2-4989-8332-b191744ebba7) successfully connected to port FA3AE5F1-3A4E-4D18-8076-2184AF0B5E86 (Friendly Name: 5942c052-bdf2-4989-8332-b191744ebba7) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083633Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8286044nch1-master-1.nc-master-1.localS-1-5-83-1-2327184282-1228931082-3317009799-17936014763/26/2022 9:35:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 8AB6039A-000A-4940-878D-B5C5C42FE86A--E1EB7EBE-A122-40DF-8027-671CADB992D6 (Friendly Name: ).2330400-92233720368547758083632Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8286044nch1-master-1.nc-master-1.local3/26/2022 9:35:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3C49E472-A9C7-41A8-94E3-E5DC09C64116--6558CD15-BF32-4543-8991-A5BC0E9027D7 (Friendly Name: 42383a66-e6a8-460a-ab82-6d80dac24f0d).2330400-92233720368547758083631Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58202988nch1-master-1.nc-master-1.localS-1-5-83-1-1011475570-1101572551-3706053524-3734092893/26/2022 9:35:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3C49E472-A9C7-41A8-94E3-E5DC09C64116--6558CD15-BF32-4543-8991-A5BC0E9027D7 successfully disconnected from port .2340400-92233720368547758083630Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58202988nch1-master-1.nc-master-1.localS-1-5-83-1-1011475570-1101572551-3706053524-3734092893/26/2022 9:35:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-77-49-5C has moved from port DCDE653B-D1AA-48FE-B97D-C81AD72C25AF (Friendly Name: 42383a66-e6a8-460a-ab82-6d80dac24f0d) to port DCDE653B-D1AA-48FE-B97D-C81AD72C25AF (Friendly Name: 42383a66-e6a8-460a-ab82-6d80dac24f0d).250410180-92233720368547758083629Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24683828nch1-master-1.nc-master-1.local3/26/2022 9:35:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-77-49-5C has moved from port F333C198-171B-4677-9013-47F16A8E8264 (Friendly Name: br-data_External) to port DCDE653B-D1AA-48FE-B97D-C81AD72C25AF (Friendly Name: 42383a66-e6a8-460a-ab82-6d80dac24f0d).250410180-92233720368547758083628Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24684816nch1-master-1.nc-master-1.local3/26/2022 9:35:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3C49E472-A9C7-41A8-94E3-E5DC09C64116--6558CD15-BF32-4543-8991-A5BC0E9027D7 (Friendly Name: 42383a66-e6a8-460a-ab82-6d80dac24f0d) successfully connected to port DCDE653B-D1AA-48FE-B97D-C81AD72C25AF (Friendly Name: 42383a66-e6a8-460a-ab82-6d80dac24f0d) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083627Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58202988nch1-master-1.nc-master-1.localS-1-5-83-1-1011475570-1101572551-3706053524-3734092893/26/2022 9:35:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3C49E472-A9C7-41A8-94E3-E5DC09C64116--6558CD15-BF32-4543-8991-A5BC0E9027D7 (Friendly Name: ).2330400-92233720368547758083626Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58205772nch1-master-1.nc-master-1.local3/26/2022 9:35:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C2EC7354-A52B-4890-BA91-AB1C87C65B31--C8C055E1-AB3F-4A75-9F2D-B952C25AFC00 (Friendly Name: c9f65bcd-1500-4f49-ae54-a70d6a459ddb).2330400-92233720368547758083625Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56163360nch1-master-1.nc-master-1.localS-1-5-83-1-3270275924-1217439019-481006010-8280981833/26/2022 9:34:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C2EC7354-A52B-4890-BA91-AB1C87C65B31--C8C055E1-AB3F-4A75-9F2D-B952C25AFC00 successfully disconnected from port .2340400-92233720368547758083624Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56163360nch1-master-1.nc-master-1.localS-1-5-83-1-3270275924-1217439019-481006010-8280981833/26/2022 9:34:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C2EC7354-A52B-4890-BA91-AB1C87C65B31--C8C055E1-AB3F-4A75-9F2D-B952C25AFC00 (Friendly Name: c9f65bcd-1500-4f49-ae54-a70d6a459ddb) successfully connected to port 979049F8-6B1D-45EE-A9E9-5718511B944D (Friendly Name: c9f65bcd-1500-4f49-ae54-a70d6a459ddb) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083623Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56165564nch1-master-1.nc-master-1.localS-1-5-83-1-3270275924-1217439019-481006010-8280981833/26/2022 9:33:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C2EC7354-A52B-4890-BA91-AB1C87C65B31--C8C055E1-AB3F-4A75-9F2D-B952C25AFC00 (Friendly Name: ).2330400-92233720368547758083622Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56165564nch1-master-1.nc-master-1.local3/26/2022 9:33:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C4352579-0638-4165-84F4-E21C9A7717B7--5BDD631E-AB46-497B-9EAB-150B5C38D6B6 (Friendly Name: b4e3af8e-6675-41d1-85f0-5aec41aba9b7).2330400-92233720368547758083621Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem992892nch1-master-1.nc-master-1.localS-1-5-83-1-3291817337-1097139768-484635780-30717684743/26/2022 9:33:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C4352579-0638-4165-84F4-E21C9A7717B7--5BDD631E-AB46-497B-9EAB-150B5C38D6B6 successfully disconnected from port .2340400-92233720368547758083620Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem992892nch1-master-1.nc-master-1.localS-1-5-83-1-3291817337-1097139768-484635780-30717684743/26/2022 9:33:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-C9-89-C8 has moved from port F30078AF-D33F-45BE-9E82-93BDB53CE6ED (Friendly Name: b4e3af8e-6675-41d1-85f0-5aec41aba9b7) to port F30078AF-D33F-45BE-9E82-93BDB53CE6ED (Friendly Name: b4e3af8e-6675-41d1-85f0-5aec41aba9b7).250410180-92233720368547758083619Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24684816nch1-master-1.nc-master-1.local3/26/2022 9:33:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C4352579-0638-4165-84F4-E21C9A7717B7--5BDD631E-AB46-497B-9EAB-150B5C38D6B6 (Friendly Name: b4e3af8e-6675-41d1-85f0-5aec41aba9b7) successfully connected to port F30078AF-D33F-45BE-9E82-93BDB53CE6ED (Friendly Name: b4e3af8e-6675-41d1-85f0-5aec41aba9b7) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083618Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem992892nch1-master-1.nc-master-1.localS-1-5-83-1-3291817337-1097139768-484635780-30717684743/26/2022 9:33:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C4352579-0638-4165-84F4-E21C9A7717B7--5BDD631E-AB46-497B-9EAB-150B5C38D6B6 (Friendly Name: ).2330400-92233720368547758083617Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem992892nch1-master-1.nc-master-1.local3/26/2022 9:33:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E87A33B6-8A28-4AB2-8572-44D539F7CC04--8A6633EA-E274-479E-8D3A-37CA0B2D1E20 (Friendly Name: 7a0fe1af-7381-4743-bdbb-ece72d57ed14).2330400-92233720368547758083616Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49605840nch1-master-1.nc-master-1.localS-1-5-83-1-3900322742-1253214760-3578032773-805414973/26/2022 9:32:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E87A33B6-8A28-4AB2-8572-44D539F7CC04--8A6633EA-E274-479E-8D3A-37CA0B2D1E20 successfully disconnected from port .2340400-92233720368547758083615Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49605840nch1-master-1.nc-master-1.localS-1-5-83-1-3900322742-1253214760-3578032773-805414973/26/2022 9:32:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E87A33B6-8A28-4AB2-8572-44D539F7CC04--8A6633EA-E274-479E-8D3A-37CA0B2D1E20 (Friendly Name: 7a0fe1af-7381-4743-bdbb-ece72d57ed14) successfully connected to port D590566F-416C-469F-86F7-C2F16C818F25 (Friendly Name: 7a0fe1af-7381-4743-bdbb-ece72d57ed14) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083614Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49605840nch1-master-1.nc-master-1.localS-1-5-83-1-3900322742-1253214760-3578032773-805414973/26/2022 9:32:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E87A33B6-8A28-4AB2-8572-44D539F7CC04--8A6633EA-E274-479E-8D3A-37CA0B2D1E20 (Friendly Name: ).2330400-92233720368547758083613Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49605840nch1-master-1.nc-master-1.local3/26/2022 9:32:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0B242226-6F65-40EB-B782-4668EF7D2D5C--3E9C778C-F87C-4366-91E8-A7DE1213A911 (Friendly Name: 17b13de9-4b02-4616-8994-9e98f10813b4).2330400-92233720368547758083612Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42723892nch1-master-1.nc-master-1.localS-1-5-83-1-186917414-1089171301-1749451447-15464852313/26/2022 9:32:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0B242226-6F65-40EB-B782-4668EF7D2D5C--3E9C778C-F87C-4366-91E8-A7DE1213A911 successfully disconnected from port .2340400-92233720368547758083611Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42723892nch1-master-1.nc-master-1.localS-1-5-83-1-186917414-1089171301-1749451447-15464852313/26/2022 9:32:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-BF-B1-9E has moved from port 5A82D155-4221-4381-AA79-1A7EE092BE3F (Friendly Name: 17b13de9-4b02-4616-8994-9e98f10813b4) to port 5A82D155-4221-4381-AA79-1A7EE092BE3F (Friendly Name: 17b13de9-4b02-4616-8994-9e98f10813b4).250410180-92233720368547758083610Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24684348nch1-master-1.nc-master-1.local3/26/2022 9:31:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-BF-B1-9E has moved from port F333C198-171B-4677-9013-47F16A8E8264 (Friendly Name: br-data_External) to port 5A82D155-4221-4381-AA79-1A7EE092BE3F (Friendly Name: 17b13de9-4b02-4616-8994-9e98f10813b4).250410180-92233720368547758083609Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24684816nch1-master-1.nc-master-1.local3/26/2022 9:31:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0B242226-6F65-40EB-B782-4668EF7D2D5C--3E9C778C-F87C-4366-91E8-A7DE1213A911 (Friendly Name: 17b13de9-4b02-4616-8994-9e98f10813b4) successfully connected to port 5A82D155-4221-4381-AA79-1A7EE092BE3F (Friendly Name: 17b13de9-4b02-4616-8994-9e98f10813b4) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083608Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42723892nch1-master-1.nc-master-1.localS-1-5-83-1-186917414-1089171301-1749451447-15464852313/26/2022 9:31:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0B242226-6F65-40EB-B782-4668EF7D2D5C--3E9C778C-F87C-4366-91E8-A7DE1213A911 (Friendly Name: ).2330400-92233720368547758083607Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42725288nch1-master-1.nc-master-1.local3/26/2022 9:31:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B316430F-E5B6-4CEF-8A15-FD45F002E76B--1188EDB7-969D-4325-9BDE-E5DBAEA925B6 (Friendly Name: 12960f28-fe73-4d1f-bb1e-1c8338fb748f).2330400-92233720368547758083606Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54363620nch1-master-1.nc-master-1.localS-1-5-83-1-3004580623-1290790326-1174214026-18103016803/26/2022 9:31:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B316430F-E5B6-4CEF-8A15-FD45F002E76B--1188EDB7-969D-4325-9BDE-E5DBAEA925B6 successfully disconnected from port .2340400-92233720368547758083605Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54363620nch1-master-1.nc-master-1.localS-1-5-83-1-3004580623-1290790326-1174214026-18103016803/26/2022 9:31:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B316430F-E5B6-4CEF-8A15-FD45F002E76B--1188EDB7-969D-4325-9BDE-E5DBAEA925B6 (Friendly Name: 12960f28-fe73-4d1f-bb1e-1c8338fb748f) successfully connected to port 4B3F2B80-946C-41AC-8788-A91B4DA2472E (Friendly Name: 12960f28-fe73-4d1f-bb1e-1c8338fb748f) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083604Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54365500nch1-master-1.nc-master-1.localS-1-5-83-1-3004580623-1290790326-1174214026-18103016803/26/2022 9:30:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B316430F-E5B6-4CEF-8A15-FD45F002E76B--1188EDB7-969D-4325-9BDE-E5DBAEA925B6 (Friendly Name: ).2330400-92233720368547758083603Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54365500nch1-master-1.nc-master-1.local3/26/2022 9:30:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2A088BB0-1F1A-4F55-8FD3-EF32FA1CBB4F--037B748A-8137-406B-9CC0-3F16AD3AC6E8 (Friendly Name: d852a738-e2e2-4f09-9978-1f8e1a6a9799).2330400-92233720368547758083602Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26882416nch1-master-1.nc-master-1.localS-1-5-83-1-705203120-1330978586-854578063-13376627143/26/2022 9:30:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2A088BB0-1F1A-4F55-8FD3-EF32FA1CBB4F--037B748A-8137-406B-9CC0-3F16AD3AC6E8 successfully disconnected from port .2340400-92233720368547758083601Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26882416nch1-master-1.nc-master-1.localS-1-5-83-1-705203120-1330978586-854578063-13376627143/26/2022 9:30:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2A088BB0-1F1A-4F55-8FD3-EF32FA1CBB4F--037B748A-8137-406B-9CC0-3F16AD3AC6E8 (Friendly Name: d852a738-e2e2-4f09-9978-1f8e1a6a9799) successfully connected to port 4A661B86-BA73-4A3C-860D-F298EC91AC0B (Friendly Name: d852a738-e2e2-4f09-9978-1f8e1a6a9799) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083600Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26882416nch1-master-1.nc-master-1.localS-1-5-83-1-705203120-1330978586-854578063-13376627143/26/2022 9:30:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2A088BB0-1F1A-4F55-8FD3-EF32FA1CBB4F--037B748A-8137-406B-9CC0-3F16AD3AC6E8 (Friendly Name: ).2330400-92233720368547758083599Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26882416nch1-master-1.nc-master-1.local3/26/2022 9:30:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403598Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 9:30:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6B2023E9-32D1-409D-AFB5-23A013A95E33--7C66049D-EB39-4EF1-823C-EE0CA35DEBF4 (Friendly Name: eafe8959-a835-4ea4-8ff9-4dea6929f400).2330400-92233720368547758083597Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54844460nch1-master-1.nc-master-1.localS-1-5-83-1-1797268457-1084043985-2686694831-8618416833/26/2022 9:29:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6B2023E9-32D1-409D-AFB5-23A013A95E33--7C66049D-EB39-4EF1-823C-EE0CA35DEBF4 successfully disconnected from port .2340400-92233720368547758083596Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54844460nch1-master-1.nc-master-1.localS-1-5-83-1-1797268457-1084043985-2686694831-8618416833/26/2022 9:29:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403595Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043204nch1-master-1.nc-master-1.local3/26/2022 9:29:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403594Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043204nch1-master-1.nc-master-1.local3/26/2022 9:29:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 017EF7EE-FAC2-4D37-A33F-BC780A1EE709--0155EDD3-8F7B-435A-A764-2CF5D517479B (Friendly Name: 4ab9cd42-bddc-414f-afcd-052060378093).2330400-92233720368547758083593Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50045384nch1-master-1.nc-master-1.localS-1-5-83-1-25098222-1295514306-2025602979-1661414503/26/2022 9:27:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 017EF7EE-FAC2-4D37-A33F-BC780A1EE709--0155EDD3-8F7B-435A-A764-2CF5D517479B successfully disconnected from port .2340400-92233720368547758083592Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50045384nch1-master-1.nc-master-1.localS-1-5-83-1-25098222-1295514306-2025602979-1661414503/26/2022 9:27:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 017EF7EE-FAC2-4D37-A33F-BC780A1EE709--0155EDD3-8F7B-435A-A764-2CF5D517479B (Friendly Name: 4ab9cd42-bddc-414f-afcd-052060378093) successfully connected to port D802A79D-3B40-4EB8-9A6A-6152D78EE3DA (Friendly Name: 4ab9cd42-bddc-414f-afcd-052060378093) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083591Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50045356nch1-master-1.nc-master-1.localS-1-5-83-1-25098222-1295514306-2025602979-1661414503/26/2022 9:27:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 017EF7EE-FAC2-4D37-A33F-BC780A1EE709--0155EDD3-8F7B-435A-A764-2CF5D517479B (Friendly Name: ).2330400-92233720368547758083590Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50045356nch1-master-1.nc-master-1.local3/26/2022 9:27:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6B2023E9-32D1-409D-AFB5-23A013A95E33--7C66049D-EB39-4EF1-823C-EE0CA35DEBF4 (Friendly Name: eafe8959-a835-4ea4-8ff9-4dea6929f400) successfully connected to port 58B7CD2F-CF2F-4745-967B-FB316859A9F3 (Friendly Name: eafe8959-a835-4ea4-8ff9-4dea6929f400) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083589Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54844280nch1-master-1.nc-master-1.localS-1-5-83-1-1797268457-1084043985-2686694831-8618416833/26/2022 9:27:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6B2023E9-32D1-409D-AFB5-23A013A95E33--7C66049D-EB39-4EF1-823C-EE0CA35DEBF4 (Friendly Name: ).2330400-92233720368547758083588Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54844280nch1-master-1.nc-master-1.local3/26/2022 9:27:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403587Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 9:27:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F6C9A866-4650-4F5E-88AB-E952B3C21404--83996F5A-B9DD-4A20-9BE8-BD64C2EF48EF (Friendly Name: e6793859-e2be-45e4-bd22-79e8b95c06d2).2330400-92233720368547758083586Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20604316nch1-master-1.nc-master-1.localS-1-5-83-1-4140410982-1331578448-1391045512-684694273/26/2022 9:26:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F6C9A866-4650-4F5E-88AB-E952B3C21404--83996F5A-B9DD-4A20-9BE8-BD64C2EF48EF successfully disconnected from port .2340400-92233720368547758083585Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20604316nch1-master-1.nc-master-1.localS-1-5-83-1-4140410982-1331578448-1391045512-684694273/26/2022 9:26:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F6C9A866-4650-4F5E-88AB-E952B3C21404--83996F5A-B9DD-4A20-9BE8-BD64C2EF48EF (Friendly Name: e6793859-e2be-45e4-bd22-79e8b95c06d2) successfully connected to port B0F398AC-79F8-47CB-AA46-101D007F2E12 (Friendly Name: e6793859-e2be-45e4-bd22-79e8b95c06d2) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083584Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20604316nch1-master-1.nc-master-1.localS-1-5-83-1-4140410982-1331578448-1391045512-684694273/26/2022 9:26:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F6C9A866-4650-4F5E-88AB-E952B3C21404--83996F5A-B9DD-4A20-9BE8-BD64C2EF48EF (Friendly Name: ).2330400-92233720368547758083583Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20604316nch1-master-1.nc-master-1.local3/26/2022 9:26:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 4EA7A50C-78C6-45AD-8FBC-8B344AAF9810--5827D39F-5553-45C2-A6F5-53845CF7E0EA (Friendly Name: 28972668-2ff3-4362-a80b-0129c3efdc78).2330400-92233720368547758083582Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52725184nch1-master-1.nc-master-1.localS-1-5-83-1-1319609612-1168996550-881573007-2784418023/26/2022 9:25:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4EA7A50C-78C6-45AD-8FBC-8B344AAF9810--5827D39F-5553-45C2-A6F5-53845CF7E0EA successfully disconnected from port .2340400-92233720368547758083581Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52725184nch1-master-1.nc-master-1.localS-1-5-83-1-1319609612-1168996550-881573007-2784418023/26/2022 9:25:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic DF87E5A8-E1A2-447F-A9AF-7D1F8B70C18A--E1659E6E-F185-4456-B927-FD56D5A2CCE3 (Friendly Name: 0a5f301c-5f41-44e5-b98c-c237294bb767).2330400-92233720368547758083580Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem22043520nch1-master-1.nc-master-1.localS-1-5-83-1-3750225320-1149231522-528330665-23279330673/26/2022 9:25:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DF87E5A8-E1A2-447F-A9AF-7D1F8B70C18A--E1659E6E-F185-4456-B927-FD56D5A2CCE3 successfully disconnected from port .2340400-92233720368547758083579Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem22043520nch1-master-1.nc-master-1.localS-1-5-83-1-3750225320-1149231522-528330665-23279330673/26/2022 9:25:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DF87E5A8-E1A2-447F-A9AF-7D1F8B70C18A--E1659E6E-F185-4456-B927-FD56D5A2CCE3 (Friendly Name: 0a5f301c-5f41-44e5-b98c-c237294bb767) successfully connected to port 30A00677-70A0-4BD1-AA1C-A9554C1616D6 (Friendly Name: 0a5f301c-5f41-44e5-b98c-c237294bb767) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083578Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem22045588nch1-master-1.nc-master-1.localS-1-5-83-1-3750225320-1149231522-528330665-23279330673/26/2022 9:25:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic DF87E5A8-E1A2-447F-A9AF-7D1F8B70C18A--E1659E6E-F185-4456-B927-FD56D5A2CCE3 (Friendly Name: ).2330400-92233720368547758083577Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem22045588nch1-master-1.nc-master-1.local3/26/2022 9:25:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4EA7A50C-78C6-45AD-8FBC-8B344AAF9810--5827D39F-5553-45C2-A6F5-53845CF7E0EA (Friendly Name: 28972668-2ff3-4362-a80b-0129c3efdc78) successfully connected to port 8312B6C2-B722-4EF4-AF49-10C0C6BD1415 (Friendly Name: 28972668-2ff3-4362-a80b-0129c3efdc78) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083576Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52725184nch1-master-1.nc-master-1.localS-1-5-83-1-1319609612-1168996550-881573007-2784418023/26/2022 9:24:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 4EA7A50C-78C6-45AD-8FBC-8B344AAF9810--5827D39F-5553-45C2-A6F5-53845CF7E0EA (Friendly Name: ).2330400-92233720368547758083575Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52725184nch1-master-1.nc-master-1.local3/26/2022 9:24:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7B8B5E23-E1E1-4D8A-B3C0-E6AF7CEF7D3A--8FCB2530-1C1D-435A-B40F-1BBDC703DC7E (Friendly Name: b4c8a4bf-92b7-4abf-89ca-f80a9d881b54).2330400-92233720368547758083574Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9045880nch1-master-1.nc-master-1.localS-1-5-83-1-2072731171-1300947425-2951135411-9813318363/26/2022 9:23:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7B8B5E23-E1E1-4D8A-B3C0-E6AF7CEF7D3A--8FCB2530-1C1D-435A-B40F-1BBDC703DC7E successfully disconnected from port .2340400-92233720368547758083573Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9045880nch1-master-1.nc-master-1.localS-1-5-83-1-2072731171-1300947425-2951135411-9813318363/26/2022 9:23:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403572Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 9:23:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-4E-E6-7C has moved from port 45B468D8-A818-4FB4-9B23-5C66DCD2874D (Friendly Name: b4c8a4bf-92b7-4abf-89ca-f80a9d881b54) to port 45B468D8-A818-4FB4-9B23-5C66DCD2874D (Friendly Name: b4c8a4bf-92b7-4abf-89ca-f80a9d881b54).250410180-92233720368547758083571Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24683568nch1-master-1.nc-master-1.local3/26/2022 9:23:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7B8B5E23-E1E1-4D8A-B3C0-E6AF7CEF7D3A--8FCB2530-1C1D-435A-B40F-1BBDC703DC7E (Friendly Name: b4c8a4bf-92b7-4abf-89ca-f80a9d881b54) successfully connected to port 45B468D8-A818-4FB4-9B23-5C66DCD2874D (Friendly Name: b4c8a4bf-92b7-4abf-89ca-f80a9d881b54) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083570Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9045132nch1-master-1.nc-master-1.localS-1-5-83-1-2072731171-1300947425-2951135411-9813318363/26/2022 9:23:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7B8B5E23-E1E1-4D8A-B3C0-E6AF7CEF7D3A--8FCB2530-1C1D-435A-B40F-1BBDC703DC7E (Friendly Name: ).2330400-92233720368547758083569Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9041900nch1-master-1.nc-master-1.local3/26/2022 9:23:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EF3CB574-5FC5-4883-80DE-3E6AD894253E--024CA9C8-E3A1-4D79-AF9A-54ED26D06386 (Friendly Name: b4c8a4bf-92b7-4abf-89ca-f80a9d881b54).2330400-92233720368547758083568Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45483356nch1-master-1.nc-master-1.localS-1-5-83-1-4013733236-1216569285-1782505088-10426503283/26/2022 9:23:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EF3CB574-5FC5-4883-80DE-3E6AD894253E--024CA9C8-E3A1-4D79-AF9A-54ED26D06386 successfully disconnected from port .2340400-92233720368547758083567Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45483356nch1-master-1.nc-master-1.localS-1-5-83-1-4013733236-1216569285-1782505088-10426503283/26/2022 9:23:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EF3CB574-5FC5-4883-80DE-3E6AD894253E--024CA9C8-E3A1-4D79-AF9A-54ED26D06386 (Friendly Name: b4c8a4bf-92b7-4abf-89ca-f80a9d881b54) successfully connected to port 6DD2615D-A506-47A1-99C0-85DCC89A0F2C (Friendly Name: b4c8a4bf-92b7-4abf-89ca-f80a9d881b54) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083566Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45483356nch1-master-1.nc-master-1.localS-1-5-83-1-4013733236-1216569285-1782505088-10426503283/26/2022 9:22:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EF3CB574-5FC5-4883-80DE-3E6AD894253E--024CA9C8-E3A1-4D79-AF9A-54ED26D06386 (Friendly Name: ).2330400-92233720368547758083565Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45483356nch1-master-1.nc-master-1.local3/26/2022 9:22:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3C1A3D3D-76D5-43FA-AAB0-7BFA8F5A9EC7--F641D27F-8E1A-4477-8DE4-85907F425B6D (Friendly Name: 870e9f5f-5fba-4e76-945e-fd9962d128d3).2330400-92233720368547758083564Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30364796nch1-master-1.nc-master-1.localS-1-5-83-1-1008352573-1140487893-4202410154-33490438553/26/2022 9:21:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3C1A3D3D-76D5-43FA-AAB0-7BFA8F5A9EC7--F641D27F-8E1A-4477-8DE4-85907F425B6D successfully disconnected from port .2340400-92233720368547758083563Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30364796nch1-master-1.nc-master-1.localS-1-5-83-1-1008352573-1140487893-4202410154-33490438553/26/2022 9:21:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E5BBCE96-482C-4085-83AD-500B2E2712BA--4668EEF5-9639-44C6-BEF7-4649215FEBE8 (Friendly Name: f7606cd0-7797-46c7-a951-3b87fcee2f57).2330400-92233720368547758083562Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8005448nch1-master-1.nc-master-1.localS-1-5-83-1-3854290582-1082476588-189836675-31217518543/26/2022 9:21:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E5BBCE96-482C-4085-83AD-500B2E2712BA--4668EEF5-9639-44C6-BEF7-4649215FEBE8 successfully disconnected from port .2340400-92233720368547758083561Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8005448nch1-master-1.nc-master-1.localS-1-5-83-1-3854290582-1082476588-189836675-31217518543/26/2022 9:21:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E5BBCE96-482C-4085-83AD-500B2E2712BA--4668EEF5-9639-44C6-BEF7-4649215FEBE8 (Friendly Name: f7606cd0-7797-46c7-a951-3b87fcee2f57) successfully connected to port BF4CABD5-C216-4E9B-AF4C-195B57906AA6 (Friendly Name: f7606cd0-7797-46c7-a951-3b87fcee2f57) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083560Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8005448nch1-master-1.nc-master-1.localS-1-5-83-1-3854290582-1082476588-189836675-31217518543/26/2022 9:21:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E5BBCE96-482C-4085-83AD-500B2E2712BA--4668EEF5-9639-44C6-BEF7-4649215FEBE8 (Friendly Name: ).2330400-92233720368547758083559Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8005448nch1-master-1.nc-master-1.local3/26/2022 9:21:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403558Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.local3/26/2022 9:21:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3C1A3D3D-76D5-43FA-AAB0-7BFA8F5A9EC7--F641D27F-8E1A-4477-8DE4-85907F425B6D (Friendly Name: 870e9f5f-5fba-4e76-945e-fd9962d128d3) successfully connected to port 508D8B6C-73C8-4954-B932-0F971FEEE6E6 (Friendly Name: 870e9f5f-5fba-4e76-945e-fd9962d128d3) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083557Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30363884nch1-master-1.nc-master-1.localS-1-5-83-1-1008352573-1140487893-4202410154-33490438553/26/2022 9:21:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3C1A3D3D-76D5-43FA-AAB0-7BFA8F5A9EC7--F641D27F-8E1A-4477-8DE4-85907F425B6D (Friendly Name: ).2330400-92233720368547758083556Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30363884nch1-master-1.nc-master-1.local3/26/2022 9:21:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CE88BADD-A12A-43FE-9113-A8BB9C7FC195--F4FD8487-C89A-4B61-A8AF-7F65C78891DF (Friendly Name: 9b190770-f5cf-46e2-933a-b74ae077b2ae).2330400-92233720368547758083555Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36285752nch1-master-1.nc-master-1.localS-1-5-83-1-3465067229-1140760874-3148354449-25124863003/26/2022 9:20:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CE88BADD-A12A-43FE-9113-A8BB9C7FC195--F4FD8487-C89A-4B61-A8AF-7F65C78891DF successfully disconnected from port .2340400-92233720368547758083554Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36285752nch1-master-1.nc-master-1.localS-1-5-83-1-3465067229-1140760874-3148354449-25124863003/26/2022 9:20:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-A5-2A-96 has moved from port 2418020F-21C1-4F8D-9B20-01EEF8B780D9 (Friendly Name: 9b190770-f5cf-46e2-933a-b74ae077b2ae) to port 2418020F-21C1-4F8D-9B20-01EEF8B780D9 (Friendly Name: 9b190770-f5cf-46e2-933a-b74ae077b2ae).250410180-92233720368547758083553Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24683828nch1-master-1.nc-master-1.local3/26/2022 9:20:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CE88BADD-A12A-43FE-9113-A8BB9C7FC195--F4FD8487-C89A-4B61-A8AF-7F65C78891DF (Friendly Name: 9b190770-f5cf-46e2-933a-b74ae077b2ae) successfully connected to port 2418020F-21C1-4F8D-9B20-01EEF8B780D9 (Friendly Name: 9b190770-f5cf-46e2-933a-b74ae077b2ae) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083552Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36284260nch1-master-1.nc-master-1.localS-1-5-83-1-3465067229-1140760874-3148354449-25124863003/26/2022 9:20:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CE88BADD-A12A-43FE-9113-A8BB9C7FC195--F4FD8487-C89A-4B61-A8AF-7F65C78891DF (Friendly Name: ).2330400-92233720368547758083551Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36285112nch1-master-1.nc-master-1.local3/26/2022 9:19:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 45CBEDA4-150F-4EF0-A472-60951BC33AE2--C86BF243-57FD-420A-8654-A34B63AA54ED (Friendly Name: 9b190770-f5cf-46e2-933a-b74ae077b2ae).2330400-92233720368547758083550Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46882648nch1-master-1.nc-master-1.localS-1-5-83-1-1170992548-1324356879-2506125988-37955018513/26/2022 9:19:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 45CBEDA4-150F-4EF0-A472-60951BC33AE2--C86BF243-57FD-420A-8654-A34B63AA54ED successfully disconnected from port .2340400-92233720368547758083549Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46882648nch1-master-1.nc-master-1.localS-1-5-83-1-1170992548-1324356879-2506125988-37955018513/26/2022 9:19:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 45CBEDA4-150F-4EF0-A472-60951BC33AE2--C86BF243-57FD-420A-8654-A34B63AA54ED (Friendly Name: 9b190770-f5cf-46e2-933a-b74ae077b2ae) successfully connected to port 86257818-E1D9-4A9B-B191-7C2EB4A74D3D (Friendly Name: 9b190770-f5cf-46e2-933a-b74ae077b2ae) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083548Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46882648nch1-master-1.nc-master-1.localS-1-5-83-1-1170992548-1324356879-2506125988-37955018513/26/2022 9:18:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 45CBEDA4-150F-4EF0-A472-60951BC33AE2--C86BF243-57FD-420A-8654-A34B63AA54ED (Friendly Name: ).2330400-92233720368547758083547Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46882648nch1-master-1.nc-master-1.local3/26/2022 9:18:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2034F0A9-4A9E-4A34-A6A3-2AB232822CD2--4EA4DBAC-9A2D-4A8E-863A-2A1FB57AC805 (Friendly Name: a7ae3418-54a5-444d-bd30-31c3a2f2e5eb).2330400-92233720368547758083546Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46604956nch1-master-1.nc-master-1.localS-1-5-83-1-540340393-1244940958-2989138854-35261322743/26/2022 9:18:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2034F0A9-4A9E-4A34-A6A3-2AB232822CD2--4EA4DBAC-9A2D-4A8E-863A-2A1FB57AC805 successfully disconnected from port .2340400-92233720368547758083545Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46604956nch1-master-1.nc-master-1.localS-1-5-83-1-540340393-1244940958-2989138854-35261322743/26/2022 9:18:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2034F0A9-4A9E-4A34-A6A3-2AB232822CD2--4EA4DBAC-9A2D-4A8E-863A-2A1FB57AC805 (Friendly Name: a7ae3418-54a5-444d-bd30-31c3a2f2e5eb) successfully connected to port A755FA69-3FB7-4E9C-81F1-211A2DE361A1 (Friendly Name: a7ae3418-54a5-444d-bd30-31c3a2f2e5eb) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083544Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46604756nch1-master-1.nc-master-1.localS-1-5-83-1-540340393-1244940958-2989138854-35261322743/26/2022 9:18:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2034F0A9-4A9E-4A34-A6A3-2AB232822CD2--4EA4DBAC-9A2D-4A8E-863A-2A1FB57AC805 (Friendly Name: ).2330400-92233720368547758083543Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46604756nch1-master-1.nc-master-1.local3/26/2022 9:18:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403542Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042196nch1-master-1.nc-master-1.local3/26/2022 9:17:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A8C9A568-5EC4-4A43-B6D7-E80D19F5E913--448D1B33-757D-4BFA-832F-9AA304350C65 (Friendly Name: a7e06ef4-c425-4c68-8a0b-c5933e1ba5fd).2330400-92233720368547758083541Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55405996nch1-master-1.nc-master-1.localS-1-5-83-1-2831787368-1245929156-233363382-3340997373/26/2022 9:17:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A8C9A568-5EC4-4A43-B6D7-E80D19F5E913--448D1B33-757D-4BFA-832F-9AA304350C65 successfully disconnected from port .2340400-92233720368547758083540Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55405996nch1-master-1.nc-master-1.localS-1-5-83-1-2831787368-1245929156-233363382-3340997373/26/2022 9:17:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A8C9A568-5EC4-4A43-B6D7-E80D19F5E913--448D1B33-757D-4BFA-832F-9AA304350C65 (Friendly Name: a7e06ef4-c425-4c68-8a0b-c5933e1ba5fd) successfully connected to port 49E42431-E470-479C-BBB7-3A2D28D1633E (Friendly Name: a7e06ef4-c425-4c68-8a0b-c5933e1ba5fd) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083539Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55405384nch1-master-1.nc-master-1.localS-1-5-83-1-2831787368-1245929156-233363382-3340997373/26/2022 9:16:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A8C9A568-5EC4-4A43-B6D7-E80D19F5E913--448D1B33-757D-4BFA-832F-9AA304350C65 (Friendly Name: ).2330400-92233720368547758083538Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55405384nch1-master-1.nc-master-1.local3/26/2022 9:16:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A25DDBFB-3606-4E6C-99B4-337C5CFD33C1--5E8EA8DE-6D7F-4A3F-9D5E-0512B0438D48 (Friendly Name: b4fda00c-1c3b-476e-bd95-b9ee7a75a2c5).2330400-92233720368547758083537Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20683124nch1-master-1.nc-master-1.localS-1-5-83-1-2724060155-1315714566-2083763353-32414098843/26/2022 9:16:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A25DDBFB-3606-4E6C-99B4-337C5CFD33C1--5E8EA8DE-6D7F-4A3F-9D5E-0512B0438D48 successfully disconnected from port .2340400-92233720368547758083536Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20683124nch1-master-1.nc-master-1.localS-1-5-83-1-2724060155-1315714566-2083763353-32414098843/26/2022 9:16:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403535Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.local3/26/2022 9:16:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403534Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.local3/26/2022 9:15:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403533Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 9:15:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A25DDBFB-3606-4E6C-99B4-337C5CFD33C1--5E8EA8DE-6D7F-4A3F-9D5E-0512B0438D48 (Friendly Name: b4fda00c-1c3b-476e-bd95-b9ee7a75a2c5) successfully connected to port 6F2066A1-E63F-49ED-9F0F-FFF9CCD74D6B (Friendly Name: b4fda00c-1c3b-476e-bd95-b9ee7a75a2c5) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083532Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20685640nch1-master-1.nc-master-1.localS-1-5-83-1-2724060155-1315714566-2083763353-32414098843/26/2022 9:15:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A25DDBFB-3606-4E6C-99B4-337C5CFD33C1--5E8EA8DE-6D7F-4A3F-9D5E-0512B0438D48 (Friendly Name: ).2330400-92233720368547758083531Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20685640nch1-master-1.nc-master-1.local3/26/2022 9:15:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 8DADF24A-9069-4D9A-9098-BA6B9FBFD055--19479357-9A1A-46E9-B47E-4C3A2AAC397E (Friendly Name: 71d8ff85-a336-4e4d-bc38-cd6bdfd77b55).2330400-92233720368547758083530Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57322204nch1-master-1.nc-master-1.localS-1-5-83-1-2376987210-1301975145-1807390864-14397439033/26/2022 9:14:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8DADF24A-9069-4D9A-9098-BA6B9FBFD055--19479357-9A1A-46E9-B47E-4C3A2AAC397E successfully disconnected from port .2340400-92233720368547758083529Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57322204nch1-master-1.nc-master-1.localS-1-5-83-1-2376987210-1301975145-1807390864-14397439033/26/2022 9:14:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403528Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042196nch1-master-1.nc-master-1.local3/26/2022 9:13:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B5B9CE0C-AD8B-4007-BC57-9A3E839B47BF--18AD363E-3A0D-421F-862D-08AD8C6DF189 (Friendly Name: 2ad246be-9db4-4928-bfb2-73737d075b68).2330400-92233720368547758083527Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51844988nch1-master-1.nc-master-1.localS-1-5-83-1-3048853004-1074245003-1050302396-32091411233/26/2022 9:13:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B5B9CE0C-AD8B-4007-BC57-9A3E839B47BF--18AD363E-3A0D-421F-862D-08AD8C6DF189 successfully disconnected from port .2340400-92233720368547758083526Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51844988nch1-master-1.nc-master-1.localS-1-5-83-1-3048853004-1074245003-1050302396-32091411233/26/2022 9:13:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8DADF24A-9069-4D9A-9098-BA6B9FBFD055--19479357-9A1A-46E9-B47E-4C3A2AAC397E (Friendly Name: 71d8ff85-a336-4e4d-bc38-cd6bdfd77b55) successfully connected to port 36295CDE-BD7E-40D4-96A1-18A620D166F3 (Friendly Name: 71d8ff85-a336-4e4d-bc38-cd6bdfd77b55) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083525Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57325700nch1-master-1.nc-master-1.localS-1-5-83-1-2376987210-1301975145-1807390864-14397439033/26/2022 9:13:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 8DADF24A-9069-4D9A-9098-BA6B9FBFD055--19479357-9A1A-46E9-B47E-4C3A2AAC397E (Friendly Name: ).2330400-92233720368547758083524Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57325700nch1-master-1.nc-master-1.local3/26/2022 9:13:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B5B9CE0C-AD8B-4007-BC57-9A3E839B47BF--18AD363E-3A0D-421F-862D-08AD8C6DF189 (Friendly Name: 2ad246be-9db4-4928-bfb2-73737d075b68) successfully connected to port 2FD65972-3D4B-4BEB-9C1C-16D71981412A (Friendly Name: 2ad246be-9db4-4928-bfb2-73737d075b68) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083523Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51845232nch1-master-1.nc-master-1.localS-1-5-83-1-3048853004-1074245003-1050302396-32091411233/26/2022 9:12:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B5B9CE0C-AD8B-4007-BC57-9A3E839B47BF--18AD363E-3A0D-421F-862D-08AD8C6DF189 (Friendly Name: ).2330400-92233720368547758083522Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51845232nch1-master-1.nc-master-1.local3/26/2022 9:12:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic FB4EEF2E-52D6-4588-86FD-BBDA989DDFE5--48ED2862-EF44-466D-B67D-EDEA1DAFFA9A (Friendly Name: d859cfd5-b1f6-4001-86f0-22b3601741dd).2330400-92233720368547758083521Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59286044nch1-master-1.nc-master-1.localS-1-5-83-1-4216254254-1166562006-3669753222-38566373363/26/2022 9:11:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FB4EEF2E-52D6-4588-86FD-BBDA989DDFE5--48ED2862-EF44-466D-B67D-EDEA1DAFFA9A successfully disconnected from port .2340400-92233720368547758083520Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59286044nch1-master-1.nc-master-1.localS-1-5-83-1-4216254254-1166562006-3669753222-38566373363/26/2022 9:11:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FB4EEF2E-52D6-4588-86FD-BBDA989DDFE5--48ED2862-EF44-466D-B67D-EDEA1DAFFA9A (Friendly Name: d859cfd5-b1f6-4001-86f0-22b3601741dd) successfully connected to port 73FD5163-B36C-46A4-B673-6C6EE4E505C8 (Friendly Name: d859cfd5-b1f6-4001-86f0-22b3601741dd) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083519Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59286044nch1-master-1.nc-master-1.localS-1-5-83-1-4216254254-1166562006-3669753222-38566373363/26/2022 9:11:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic FB4EEF2E-52D6-4588-86FD-BBDA989DDFE5--48ED2862-EF44-466D-B67D-EDEA1DAFFA9A (Friendly Name: ).2330400-92233720368547758083518Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59286044nch1-master-1.nc-master-1.local3/26/2022 9:11:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic FB4EEF2E-52D6-4588-86FD-BBDA989DDFE5--48ED2862-EF44-466D-B67D-EDEA1DAFFA9A (Friendly Name: d859cfd5-b1f6-4001-86f0-22b3601741dd).2330400-92233720368547758083517Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59521960nch1-master-1.nc-master-1.localS-1-5-83-1-4216254254-1166562006-3669753222-38566373363/26/2022 9:11:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FB4EEF2E-52D6-4588-86FD-BBDA989DDFE5--48ED2862-EF44-466D-B67D-EDEA1DAFFA9A successfully disconnected from port .2340400-92233720368547758083516Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59521960nch1-master-1.nc-master-1.localS-1-5-83-1-4216254254-1166562006-3669753222-38566373363/26/2022 9:11:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 63B392AE-DB80-458E-9EC1-F99893523491--61B8FDAF-FACB-4D3E-883F-4F85B65EBF8C (Friendly Name: d918e07f-e0c2-435d-872d-f275cd4abfff).2330400-92233720368547758083515Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57565460nch1-master-1.nc-master-1.localS-1-5-83-1-1672712878-1166990208-2566504862-24361253313/26/2022 9:11:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 63B392AE-DB80-458E-9EC1-F99893523491--61B8FDAF-FACB-4D3E-883F-4F85B65EBF8C successfully disconnected from port .2340400-92233720368547758083514Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57565460nch1-master-1.nc-master-1.localS-1-5-83-1-1672712878-1166990208-2566504862-24361253313/26/2022 9:11:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FB4EEF2E-52D6-4588-86FD-BBDA989DDFE5--48ED2862-EF44-466D-B67D-EDEA1DAFFA9A (Friendly Name: d859cfd5-b1f6-4001-86f0-22b3601741dd) successfully connected to port 73FD5163-B36C-46A4-B673-6C6EE4E505C8 (Friendly Name: d859cfd5-b1f6-4001-86f0-22b3601741dd) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083513Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59525772nch1-master-1.nc-master-1.localS-1-5-83-1-4216254254-1166562006-3669753222-38566373363/26/2022 9:11:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic FB4EEF2E-52D6-4588-86FD-BBDA989DDFE5--48ED2862-EF44-466D-B67D-EDEA1DAFFA9A (Friendly Name: ).2330400-92233720368547758083512Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59525772nch1-master-1.nc-master-1.local3/26/2022 9:11:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403511Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042196nch1-master-1.nc-master-1.local3/26/2022 9:11:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 63B392AE-DB80-458E-9EC1-F99893523491--61B8FDAF-FACB-4D3E-883F-4F85B65EBF8C (Friendly Name: d918e07f-e0c2-435d-872d-f275cd4abfff) successfully connected to port F4C20460-EA34-412D-B7C5-E4963250FF44 (Friendly Name: d918e07f-e0c2-435d-872d-f275cd4abfff) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083510Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57564416nch1-master-1.nc-master-1.localS-1-5-83-1-1672712878-1166990208-2566504862-24361253313/26/2022 9:11:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 63B392AE-DB80-458E-9EC1-F99893523491--61B8FDAF-FACB-4D3E-883F-4F85B65EBF8C (Friendly Name: ).2330400-92233720368547758083509Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57564416nch1-master-1.nc-master-1.local3/26/2022 9:11:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AA58F973-5148-4D25-A4D9-2C15AEEFB323--AC0B7021-438A-4C77-A55B-22E5FF6D8D7F (Friendly Name: ad307adc-02ff-4ad8-a6ff-b391aef67ac1).2330400-92233720368547758083508Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42445844nch1-master-1.nc-master-1.localS-1-5-83-1-2857957747-1294291272-355260836-5989948623/26/2022 9:10:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AA58F973-5148-4D25-A4D9-2C15AEEFB323--AC0B7021-438A-4C77-A55B-22E5FF6D8D7F successfully disconnected from port .2340400-92233720368547758083507Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42445844nch1-master-1.nc-master-1.localS-1-5-83-1-2857957747-1294291272-355260836-5989948623/26/2022 9:10:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F4C5A4E5-1D20-463F-8DD6-C7EE3CD5C7ED--21C8556F-5778-4BA2-AFE9-F73A004D1EE7 (Friendly Name: d859cfd5-b1f6-4001-86f0-22b3601741dd).2330400-92233720368547758083506Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60364860nch1-master-1.nc-master-1.localS-1-5-83-1-4106593509-1178541344-4006073997-39892964443/26/2022 9:10:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F4C5A4E5-1D20-463F-8DD6-C7EE3CD5C7ED--21C8556F-5778-4BA2-AFE9-F73A004D1EE7 successfully disconnected from port .2340400-92233720368547758083505Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60364860nch1-master-1.nc-master-1.localS-1-5-83-1-4106593509-1178541344-4006073997-39892964443/26/2022 9:10:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AA58F973-5148-4D25-A4D9-2C15AEEFB323--AC0B7021-438A-4C77-A55B-22E5FF6D8D7F (Friendly Name: ad307adc-02ff-4ad8-a6ff-b391aef67ac1) successfully connected to port 3A629B21-2704-4470-8DAA-E8898A30E6A1 (Friendly Name: ad307adc-02ff-4ad8-a6ff-b391aef67ac1) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083504Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42445552nch1-master-1.nc-master-1.localS-1-5-83-1-2857957747-1294291272-355260836-5989948623/26/2022 9:10:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AA58F973-5148-4D25-A4D9-2C15AEEFB323--AC0B7021-438A-4C77-A55B-22E5FF6D8D7F (Friendly Name: ).2330400-92233720368547758083503Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42445552nch1-master-1.nc-master-1.local3/26/2022 9:10:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118403502Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043204nch1-master-1.nc-master-1.local3/26/2022 9:10:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AA58F973-5148-4D25-A4D9-2C15AEEFB323--AC0B7021-438A-4C77-A55B-22E5FF6D8D7F (Friendly Name: ad307adc-02ff-4ad8-a6ff-b391aef67ac1).2330400-92233720368547758083501Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49203156nch1-master-1.nc-master-1.localS-1-5-83-1-2857957747-1294291272-355260836-5989948623/26/2022 9:10:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AA58F973-5148-4D25-A4D9-2C15AEEFB323--AC0B7021-438A-4C77-A55B-22E5FF6D8D7F successfully disconnected from port .2340400-92233720368547758083500Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49203156nch1-master-1.nc-master-1.localS-1-5-83-1-2857957747-1294291272-355260836-5989948623/26/2022 9:10:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403499Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043204nch1-master-1.nc-master-1.local3/26/2022 9:10:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0D3D2CB1-B00B-41A0-8490-E9F2EA2E40F4--C79A3A0C-073E-4FF8-894C-69E2E30D7D6A (Friendly Name: 84a12c26-186e-4dc5-b76e-261f807260e1).2330400-92233720368547758083498Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61243288nch1-master-1.nc-master-1.localS-1-5-83-1-222112945-1101049867-4075393156-40978470183/26/2022 9:09:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0D3D2CB1-B00B-41A0-8490-E9F2EA2E40F4--C79A3A0C-073E-4FF8-894C-69E2E30D7D6A successfully disconnected from port .2340400-92233720368547758083497Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61243288nch1-master-1.nc-master-1.localS-1-5-83-1-222112945-1101049867-4075393156-40978470183/26/2022 9:09:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0D3D2CB1-B00B-41A0-8490-E9F2EA2E40F4--C79A3A0C-073E-4FF8-894C-69E2E30D7D6A (Friendly Name: 84a12c26-186e-4dc5-b76e-261f807260e1) successfully connected to port 094EC42B-89A6-454E-9623-DCC8FC8237BF (Friendly Name: 84a12c26-186e-4dc5-b76e-261f807260e1) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083496Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61243288nch1-master-1.nc-master-1.localS-1-5-83-1-222112945-1101049867-4075393156-40978470183/26/2022 9:09:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0D3D2CB1-B00B-41A0-8490-E9F2EA2E40F4--C79A3A0C-073E-4FF8-894C-69E2E30D7D6A (Friendly Name: ).2330400-92233720368547758083495Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61243288nch1-master-1.nc-master-1.local3/26/2022 9:09:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AA58F973-5148-4D25-A4D9-2C15AEEFB323--AC0B7021-438A-4C77-A55B-22E5FF6D8D7F (Friendly Name: ad307adc-02ff-4ad8-a6ff-b391aef67ac1) successfully connected to port 3A629B21-2704-4470-8DAA-E8898A30E6A1 (Friendly Name: ad307adc-02ff-4ad8-a6ff-b391aef67ac1) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083494Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49202552nch1-master-1.nc-master-1.localS-1-5-83-1-2857957747-1294291272-355260836-5989948623/26/2022 9:09:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AA58F973-5148-4D25-A4D9-2C15AEEFB323--AC0B7021-438A-4C77-A55B-22E5FF6D8D7F (Friendly Name: ).2330400-92233720368547758083493Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49202552nch1-master-1.nc-master-1.local3/26/2022 9:09:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118403492Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 9:09:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F4C5A4E5-1D20-463F-8DD6-C7EE3CD5C7ED--21C8556F-5778-4BA2-AFE9-F73A004D1EE7 (Friendly Name: d859cfd5-b1f6-4001-86f0-22b3601741dd) successfully connected to port 16F94EDB-46CB-458C-9109-271856ABDAF9 (Friendly Name: d859cfd5-b1f6-4001-86f0-22b3601741dd) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083491Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60365332nch1-master-1.nc-master-1.localS-1-5-83-1-4106593509-1178541344-4006073997-39892964443/26/2022 9:08:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F4C5A4E5-1D20-463F-8DD6-C7EE3CD5C7ED--21C8556F-5778-4BA2-AFE9-F73A004D1EE7 (Friendly Name: ).2330400-92233720368547758083490Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60365332nch1-master-1.nc-master-1.local3/26/2022 9:08:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E5FD56CA-CBE3-408D-ACCA-FA39831A19CD--6BAF04FF-2AC8-4178-86F7-9484C33FA21F (Friendly Name: 6da94dd1-eb5c-4021-b21f-a6152d93e370).2330400-92233720368547758083489Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59962308nch1-master-1.nc-master-1.localS-1-5-83-1-3858585290-1083034595-972737196-34409744673/26/2022 9:08:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E5FD56CA-CBE3-408D-ACCA-FA39831A19CD--6BAF04FF-2AC8-4178-86F7-9484C33FA21F successfully disconnected from port .2340400-92233720368547758083488Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59962308nch1-master-1.nc-master-1.localS-1-5-83-1-3858585290-1083034595-972737196-34409744673/26/2022 9:08:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E5FD56CA-CBE3-408D-ACCA-FA39831A19CD--6BAF04FF-2AC8-4178-86F7-9484C33FA21F (Friendly Name: 6da94dd1-eb5c-4021-b21f-a6152d93e370) successfully connected to port 31E4F943-23D6-4A59-97ED-CDB0D25BCBF2 (Friendly Name: 6da94dd1-eb5c-4021-b21f-a6152d93e370) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083487Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59964176nch1-master-1.nc-master-1.localS-1-5-83-1-3858585290-1083034595-972737196-34409744673/26/2022 9:08:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E5FD56CA-CBE3-408D-ACCA-FA39831A19CD--6BAF04FF-2AC8-4178-86F7-9484C33FA21F (Friendly Name: ).2330400-92233720368547758083486Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59964176nch1-master-1.nc-master-1.local3/26/2022 9:08:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 87331016-7291-42A5-9EB6-EB0BDCCC1C82--BC5EB42E-DC9E-453E-9EDE-0F2BFC0BBB40 (Friendly Name: 4f2b792e-b9a0-468f-817b-6cfaf02808f7).2330400-92233720368547758083485Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5765664nch1-master-1.nc-master-1.localS-1-5-83-1-2268270614-1118139025-199997086-21829255323/26/2022 9:08:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 87331016-7291-42A5-9EB6-EB0BDCCC1C82--BC5EB42E-DC9E-453E-9EDE-0F2BFC0BBB40 successfully disconnected from port .2340400-92233720368547758083484Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5765664nch1-master-1.nc-master-1.localS-1-5-83-1-2268270614-1118139025-199997086-21829255323/26/2022 9:08:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A052971E-0E35-4B15-BCEE-A2F028CD8927--87478F39-A92A-4400-8945-191C343B5E34 (Friendly Name: 36c88967-8618-45d8-aaf7-44c5948e28e6).2330400-92233720368547758083483Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3760996nch1-master-1.nc-master-1.localS-1-5-83-1-2689767198-1259671093-4037209788-6633423763/26/2022 9:08:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A052971E-0E35-4B15-BCEE-A2F028CD8927--87478F39-A92A-4400-8945-191C343B5E34 successfully disconnected from port .2340400-92233720368547758083482Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3760996nch1-master-1.nc-master-1.localS-1-5-83-1-2689767198-1259671093-4037209788-6633423763/26/2022 9:08:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 803F4DD2-9F16-46B8-9420-52A7B7508B30--FDEEC638-D9EA-4686-AC0D-BAEE40018885 (Friendly Name: 3e1be3af-c4f0-434c-aa0e-29156495a7bb).2330400-92233720368547758083481Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54684052nch1-master-1.nc-master-1.localS-1-5-83-1-2151632338-1186504470-2807177364-8144365353/26/2022 9:08:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 803F4DD2-9F16-46B8-9420-52A7B7508B30--FDEEC638-D9EA-4686-AC0D-BAEE40018885 successfully disconnected from port .2340400-92233720368547758083480Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54684052nch1-master-1.nc-master-1.localS-1-5-83-1-2151632338-1186504470-2807177364-8144365353/26/2022 9:08:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403479Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.local3/26/2022 9:07:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A052971E-0E35-4B15-BCEE-A2F028CD8927--87478F39-A92A-4400-8945-191C343B5E34 (Friendly Name: 36c88967-8618-45d8-aaf7-44c5948e28e6) successfully connected to port 831CE349-352C-46E2-8EBB-0B4D7AA84321 (Friendly Name: 36c88967-8618-45d8-aaf7-44c5948e28e6) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083478Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37603956nch1-master-1.nc-master-1.localS-1-5-83-1-2689767198-1259671093-4037209788-6633423763/26/2022 9:07:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A052971E-0E35-4B15-BCEE-A2F028CD8927--87478F39-A92A-4400-8945-191C343B5E34 (Friendly Name: ).2330400-92233720368547758083477Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37603956nch1-master-1.nc-master-1.local3/26/2022 9:07:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403476Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 9:07:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 87331016-7291-42A5-9EB6-EB0BDCCC1C82--BC5EB42E-DC9E-453E-9EDE-0F2BFC0BBB40 (Friendly Name: 4f2b792e-b9a0-468f-817b-6cfaf02808f7) successfully connected to port 89E218B7-631C-4123-A5AC-11114CD59A59 (Friendly Name: 4f2b792e-b9a0-468f-817b-6cfaf02808f7) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083475Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5765612nch1-master-1.nc-master-1.localS-1-5-83-1-2268270614-1118139025-199997086-21829255323/26/2022 9:07:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 87331016-7291-42A5-9EB6-EB0BDCCC1C82--BC5EB42E-DC9E-453E-9EDE-0F2BFC0BBB40 (Friendly Name: ).2330400-92233720368547758083474Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5765612nch1-master-1.nc-master-1.local3/26/2022 9:07:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 803F4DD2-9F16-46B8-9420-52A7B7508B30--FDEEC638-D9EA-4686-AC0D-BAEE40018885 (Friendly Name: 3e1be3af-c4f0-434c-aa0e-29156495a7bb) successfully connected to port 4A7DA464-156B-47BC-9649-AF69B6CCC36C (Friendly Name: 3e1be3af-c4f0-434c-aa0e-29156495a7bb) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083473Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54684052nch1-master-1.nc-master-1.localS-1-5-83-1-2151632338-1186504470-2807177364-8144365353/26/2022 9:07:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 803F4DD2-9F16-46B8-9420-52A7B7508B30--FDEEC638-D9EA-4686-AC0D-BAEE40018885 (Friendly Name: ).2330400-92233720368547758083472Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54684052nch1-master-1.nc-master-1.local3/26/2022 9:07:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3EFA6028-470B-453B-89FF-885560B46115--114AB523-71F9-44AD-916D-1BB34C83DE25 (Friendly Name: 81f7ffd5-4a7a-4fb2-b8a1-ffa08e126b20).2330400-92233720368547758083471Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54165432nch1-master-1.nc-master-1.localS-1-5-83-1-1056596008-1161512715-1435041673-3587247043/26/2022 9:06:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3EFA6028-470B-453B-89FF-885560B46115--114AB523-71F9-44AD-916D-1BB34C83DE25 successfully disconnected from port .2340400-92233720368547758083470Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54165432nch1-master-1.nc-master-1.localS-1-5-83-1-1056596008-1161512715-1435041673-3587247043/26/2022 9:06:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7286F84B-8B31-4963-8DF4-2FB9975648A0--DEC6EF06-2AA9-4075-B111-F3C841A186C2 (Friendly Name: e9dccde5-6613-4ef8-9812-952d9a6c882a).2330400-92233720368547758083469Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49605692nch1-master-1.nc-master-1.localS-1-5-83-1-1921448011-1231260465-3106927757-26890953193/26/2022 9:06:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7286F84B-8B31-4963-8DF4-2FB9975648A0--DEC6EF06-2AA9-4075-B111-F3C841A186C2 successfully disconnected from port .2340400-92233720368547758083468Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49605692nch1-master-1.nc-master-1.localS-1-5-83-1-1921448011-1231260465-3106927757-26890953193/26/2022 9:06:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3EFA6028-470B-453B-89FF-885560B46115--114AB523-71F9-44AD-916D-1BB34C83DE25 (Friendly Name: 81f7ffd5-4a7a-4fb2-b8a1-ffa08e126b20) successfully connected to port B89B8F58-8AE6-4637-BFBD-3DCF891327DC (Friendly Name: 81f7ffd5-4a7a-4fb2-b8a1-ffa08e126b20) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083467Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54165408nch1-master-1.nc-master-1.localS-1-5-83-1-1056596008-1161512715-1435041673-3587247043/26/2022 9:06:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3EFA6028-470B-453B-89FF-885560B46115--114AB523-71F9-44AD-916D-1BB34C83DE25 (Friendly Name: ).2330400-92233720368547758083466Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54165408nch1-master-1.nc-master-1.local3/26/2022 9:06:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 4FC6662A-118F-4450-8D60-D7C02A607B5E--DBE37D82-1157-4C76-9754-1A0C60CF6232 (Friendly Name: 0b287a38-d197-43f5-93fb-a9adf2828080).2330400-92233720368547758083465Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61284276nch1-master-1.nc-master-1.localS-1-5-83-1-1338402346-1146098063-3235340429-15851438503/26/2022 9:06:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4FC6662A-118F-4450-8D60-D7C02A607B5E--DBE37D82-1157-4C76-9754-1A0C60CF6232 successfully disconnected from port .2340400-92233720368547758083464Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61284276nch1-master-1.nc-master-1.localS-1-5-83-1-1338402346-1146098063-3235340429-15851438503/26/2022 9:06:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403463Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612nch1-master-1.nc-master-1.local3/26/2022 9:06:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3ADC6675-A9CC-495C-BBBD-FAF65F4DD40A--4E75716B-706D-4D60-9C4A-D6D805D713FC (Friendly Name: 8d48f211-ac1b-4be6-b4f7-5b36f78d1307).2330400-92233720368547758083462Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60882088nch1-master-1.nc-master-1.localS-1-5-83-1-987522677-1230809548-4143627707-1816855993/26/2022 9:06:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3ADC6675-A9CC-495C-BBBD-FAF65F4DD40A--4E75716B-706D-4D60-9C4A-D6D805D713FC successfully disconnected from port .2340400-92233720368547758083461Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60882088nch1-master-1.nc-master-1.localS-1-5-83-1-987522677-1230809548-4143627707-1816855993/26/2022 9:06:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3ADC6675-A9CC-495C-BBBD-FAF65F4DD40A--4E75716B-706D-4D60-9C4A-D6D805D713FC (Friendly Name: 8d48f211-ac1b-4be6-b4f7-5b36f78d1307) successfully connected to port 678C9E64-87FF-4049-9AFE-649E4F5E0F22 (Friendly Name: 8d48f211-ac1b-4be6-b4f7-5b36f78d1307) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083460Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6088752nch1-master-1.nc-master-1.localS-1-5-83-1-987522677-1230809548-4143627707-1816855993/26/2022 9:06:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3ADC6675-A9CC-495C-BBBD-FAF65F4DD40A--4E75716B-706D-4D60-9C4A-D6D805D713FC (Friendly Name: ).2330400-92233720368547758083459Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6088752nch1-master-1.nc-master-1.local3/26/2022 9:06:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7286F84B-8B31-4963-8DF4-2FB9975648A0--DEC6EF06-2AA9-4075-B111-F3C841A186C2 (Friendly Name: e9dccde5-6613-4ef8-9812-952d9a6c882a) successfully connected to port 87E11BEC-2E11-4478-83B0-30EB0868DCFF (Friendly Name: e9dccde5-6613-4ef8-9812-952d9a6c882a) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083458Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49604200nch1-master-1.nc-master-1.localS-1-5-83-1-1921448011-1231260465-3106927757-26890953193/26/2022 9:05:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7286F84B-8B31-4963-8DF4-2FB9975648A0--DEC6EF06-2AA9-4075-B111-F3C841A186C2 (Friendly Name: ).2330400-92233720368547758083457Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49604200nch1-master-1.nc-master-1.local3/26/2022 9:05:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7286F84B-8B31-4963-8DF4-2FB9975648A0--DEC6EF06-2AA9-4075-B111-F3C841A186C2 (Friendly Name: e9dccde5-6613-4ef8-9812-952d9a6c882a).2330400-92233720368547758083456Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38243192nch1-master-1.nc-master-1.localS-1-5-83-1-1921448011-1231260465-3106927757-26890953193/26/2022 9:05:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7286F84B-8B31-4963-8DF4-2FB9975648A0--DEC6EF06-2AA9-4075-B111-F3C841A186C2 successfully disconnected from port .2340400-92233720368547758083455Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38243192nch1-master-1.nc-master-1.localS-1-5-83-1-1921448011-1231260465-3106927757-26890953193/26/2022 9:05:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 698456B9-2336-495E-9914-8DB46B42D64D--CBBD488D-D605-4E5E-A392-58BF8F577107 (Friendly Name: 351f6d49-7dc1-4586-92ad-1ec0e7a14585).2330400-92233720368547758083454Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30963528nch1-master-1.nc-master-1.localS-1-5-83-1-1770280633-1230906166-3029144729-13058873393/26/2022 9:05:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 698456B9-2336-495E-9914-8DB46B42D64D--CBBD488D-D605-4E5E-A392-58BF8F577107 successfully disconnected from port .2340400-92233720368547758083453Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30963528nch1-master-1.nc-master-1.localS-1-5-83-1-1770280633-1230906166-3029144729-13058873393/26/2022 9:05:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4FC6662A-118F-4450-8D60-D7C02A607B5E--DBE37D82-1157-4C76-9754-1A0C60CF6232 (Friendly Name: 0b287a38-d197-43f5-93fb-a9adf2828080) successfully connected to port 8C31DA3B-EA6D-4962-9CB4-7575DB356291 (Friendly Name: 0b287a38-d197-43f5-93fb-a9adf2828080) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083452Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6128676nch1-master-1.nc-master-1.localS-1-5-83-1-1338402346-1146098063-3235340429-15851438503/26/2022 9:05:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 4FC6662A-118F-4450-8D60-D7C02A607B5E--DBE37D82-1157-4C76-9754-1A0C60CF6232 (Friendly Name: ).2330400-92233720368547758083451Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6128676nch1-master-1.nc-master-1.local3/26/2022 9:05:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 698456B9-2336-495E-9914-8DB46B42D64D--CBBD488D-D605-4E5E-A392-58BF8F577107 (Friendly Name: 351f6d49-7dc1-4586-92ad-1ec0e7a14585) successfully connected to port FBFC545D-F57E-42CD-A1D7-DB9B68A51BBF (Friendly Name: 351f6d49-7dc1-4586-92ad-1ec0e7a14585) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083450Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30963620nch1-master-1.nc-master-1.localS-1-5-83-1-1770280633-1230906166-3029144729-13058873393/26/2022 9:05:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 698456B9-2336-495E-9914-8DB46B42D64D--CBBD488D-D605-4E5E-A392-58BF8F577107 (Friendly Name: ).2330400-92233720368547758083449Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30963620nch1-master-1.nc-master-1.local3/26/2022 9:05:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403448Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 9:05:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5627EF3A-0FC9-4583-8556-1B478F0285B5--63B75E28-D94E-495E-8450-C46D565B7677 (Friendly Name: 9933c1ea-5c1c-4820-8444-563e9b76d35d).2330400-92233720368547758083447Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52805092nch1-master-1.nc-master-1.localS-1-5-83-1-1445457722-1166217161-1192973957-30453930393/26/2022 9:05:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5627EF3A-0FC9-4583-8556-1B478F0285B5--63B75E28-D94E-495E-8450-C46D565B7677 successfully disconnected from port .2340400-92233720368547758083446Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52805092nch1-master-1.nc-master-1.localS-1-5-83-1-1445457722-1166217161-1192973957-30453930393/26/2022 9:05:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5627EF3A-0FC9-4583-8556-1B478F0285B5--63B75E28-D94E-495E-8450-C46D565B7677 (Friendly Name: 9933c1ea-5c1c-4820-8444-563e9b76d35d) successfully connected to port EA4ECA10-844B-4A57-AB8C-67F3BB340A36 (Friendly Name: 9933c1ea-5c1c-4820-8444-563e9b76d35d) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083445Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52805284nch1-master-1.nc-master-1.localS-1-5-83-1-1445457722-1166217161-1192973957-30453930393/26/2022 9:05:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5627EF3A-0FC9-4583-8556-1B478F0285B5--63B75E28-D94E-495E-8450-C46D565B7677 (Friendly Name: ).2330400-92233720368547758083444Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52805284nch1-master-1.nc-master-1.local3/26/2022 9:05:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7286F84B-8B31-4963-8DF4-2FB9975648A0--DEC6EF06-2AA9-4075-B111-F3C841A186C2 (Friendly Name: e9dccde5-6613-4ef8-9812-952d9a6c882a) successfully connected to port 87E11BEC-2E11-4478-83B0-30EB0868DCFF (Friendly Name: e9dccde5-6613-4ef8-9812-952d9a6c882a) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083443Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38243192nch1-master-1.nc-master-1.localS-1-5-83-1-1921448011-1231260465-3106927757-26890953193/26/2022 9:04:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7286F84B-8B31-4963-8DF4-2FB9975648A0--DEC6EF06-2AA9-4075-B111-F3C841A186C2 (Friendly Name: ).2330400-92233720368547758083442Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38243192nch1-master-1.nc-master-1.local3/26/2022 9:04:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7286F84B-8B31-4963-8DF4-2FB9975648A0--DEC6EF06-2AA9-4075-B111-F3C841A186C2 (Friendly Name: e9dccde5-6613-4ef8-9812-952d9a6c882a).2330400-92233720368547758083441Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43883308nch1-master-1.nc-master-1.localS-1-5-83-1-1921448011-1231260465-3106927757-26890953193/26/2022 9:04:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7286F84B-8B31-4963-8DF4-2FB9975648A0--DEC6EF06-2AA9-4075-B111-F3C841A186C2 successfully disconnected from port .2340400-92233720368547758083440Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43883308nch1-master-1.nc-master-1.localS-1-5-83-1-1921448011-1231260465-3106927757-26890953193/26/2022 9:04:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403439Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 9:04:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 72C4FBC8-01DB-4716-A753-AD82D8B91332--D532BADD-F575-404D-811A-2D69B9CC639B (Friendly Name: 0b287a38-d197-43f5-93fb-a9adf2828080).2330400-92233720368547758083438Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41405448nch1-master-1.nc-master-1.localS-1-5-83-1-1925512136-1192624603-2192397223-8401535603/26/2022 9:04:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 72C4FBC8-01DB-4716-A753-AD82D8B91332--D532BADD-F575-404D-811A-2D69B9CC639B successfully disconnected from port .2340400-92233720368547758083437Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41405448nch1-master-1.nc-master-1.localS-1-5-83-1-1925512136-1192624603-2192397223-8401535603/26/2022 9:04:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be).2330400-92233720368547758083436Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30245840nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A successfully disconnected from port .2340400-92233720368547758083435Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30245840nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EAB4FE2A-5DC3-4C74-860F-D8D944A327B8--9B936928-0B0E-4561-9E4F-F71B6DB5C0A5 (Friendly Name: 2e125957-f39c-4484-b64d-bc6303b2d621).2330400-92233720368547758083434Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50962556nch1-master-1.nc-master-1.localS-1-5-83-1-3937730090-1282694595-3654815622-30896054443/26/2022 9:03:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EAB4FE2A-5DC3-4C74-860F-D8D944A327B8--9B936928-0B0E-4561-9E4F-F71B6DB5C0A5 successfully disconnected from port .2340400-92233720368547758083433Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50962556nch1-master-1.nc-master-1.localS-1-5-83-1-3937730090-1282694595-3654815622-30896054443/26/2022 9:03:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be) successfully connected to port 6FC6F5C7-D4B5-4EAC-B3A1-F0707D718C35 (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083432Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30244120nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:03:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: ).2330400-92233720368547758083431Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30244120nch1-master-1.nc-master-1.local3/26/2022 9:03:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be).2330400-92233720368547758083430Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19843764nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:03:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A successfully disconnected from port .2340400-92233720368547758083429Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19843764nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:03:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7286F84B-8B31-4963-8DF4-2FB9975648A0--DEC6EF06-2AA9-4075-B111-F3C841A186C2 (Friendly Name: e9dccde5-6613-4ef8-9812-952d9a6c882a) successfully connected to port 87E11BEC-2E11-4478-83B0-30EB0868DCFF (Friendly Name: e9dccde5-6613-4ef8-9812-952d9a6c882a) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083428Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43883396nch1-master-1.nc-master-1.localS-1-5-83-1-1921448011-1231260465-3106927757-26890953193/26/2022 9:03:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7286F84B-8B31-4963-8DF4-2FB9975648A0--DEC6EF06-2AA9-4075-B111-F3C841A186C2 (Friendly Name: ).2330400-92233720368547758083427Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43883396nch1-master-1.nc-master-1.local3/26/2022 9:03:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be) successfully connected to port 6FC6F5C7-D4B5-4EAC-B3A1-F0707D718C35 (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083426Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19843316nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:03:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: ).2330400-92233720368547758083425Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19843316nch1-master-1.nc-master-1.local3/26/2022 9:03:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EAB4FE2A-5DC3-4C74-860F-D8D944A327B8--9B936928-0B0E-4561-9E4F-F71B6DB5C0A5 (Friendly Name: 2e125957-f39c-4484-b64d-bc6303b2d621) successfully connected to port 963ADB9E-7C32-4A81-9C83-ED077016FB4F (Friendly Name: 2e125957-f39c-4484-b64d-bc6303b2d621) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083424Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50964172nch1-master-1.nc-master-1.localS-1-5-83-1-3937730090-1282694595-3654815622-30896054443/26/2022 9:03:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EAB4FE2A-5DC3-4C74-860F-D8D944A327B8--9B936928-0B0E-4561-9E4F-F71B6DB5C0A5 (Friendly Name: ).2330400-92233720368547758083423Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50964172nch1-master-1.nc-master-1.local3/26/2022 9:03:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 72C4FBC8-01DB-4716-A753-AD82D8B91332--D532BADD-F575-404D-811A-2D69B9CC639B (Friendly Name: 0b287a38-d197-43f5-93fb-a9adf2828080) successfully connected to port E9A9079E-6A92-4972-B2C2-1E74F5A97347 (Friendly Name: 0b287a38-d197-43f5-93fb-a9adf2828080) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083422Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4140748nch1-master-1.nc-master-1.localS-1-5-83-1-1925512136-1192624603-2192397223-8401535603/26/2022 9:03:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 72C4FBC8-01DB-4716-A753-AD82D8B91332--D532BADD-F575-404D-811A-2D69B9CC639B (Friendly Name: ).2330400-92233720368547758083421Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4140748nch1-master-1.nc-master-1.local3/26/2022 9:03:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be).2330400-92233720368547758083420Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21124716nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:03:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A successfully disconnected from port .2340400-92233720368547758083419Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21124716nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:03:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7B9D0A3A-4A15-439D-8AAB-780EB195CE65--F4CEF20E-586E-4CFA-8764-5B4ACA2B2D77 (Friendly Name: d6021828-9e93-4aec-99b6-e95282b2f43d).2330400-92233720368547758083418Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53565072nch1-master-1.nc-master-1.localS-1-5-83-1-2073889338-1134381589-242789258-17080375533/26/2022 9:03:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7B9D0A3A-4A15-439D-8AAB-780EB195CE65--F4CEF20E-586E-4CFA-8764-5B4ACA2B2D77 successfully disconnected from port .2340400-92233720368547758083417Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53565072nch1-master-1.nc-master-1.localS-1-5-83-1-2073889338-1134381589-242789258-17080375533/26/2022 9:03:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7B9D0A3A-4A15-439D-8AAB-780EB195CE65--F4CEF20E-586E-4CFA-8764-5B4ACA2B2D77 (Friendly Name: d6021828-9e93-4aec-99b6-e95282b2f43d) successfully connected to port 0267CEEC-7FF6-4641-9291-81395A3BC178 (Friendly Name: d6021828-9e93-4aec-99b6-e95282b2f43d) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083416Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53563756nch1-master-1.nc-master-1.localS-1-5-83-1-2073889338-1134381589-242789258-17080375533/26/2022 9:03:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7B9D0A3A-4A15-439D-8AAB-780EB195CE65--F4CEF20E-586E-4CFA-8764-5B4ACA2B2D77 (Friendly Name: ).2330400-92233720368547758083415Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53563756nch1-master-1.nc-master-1.local3/26/2022 9:03:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 65198312-928F-4229-A2C7-A78E3500E891--FF89B0F1-0967-40E9-979B-4477DDD49B80 (Friendly Name: dcaf364f-32ed-4913-b91e-3c3ff9f85e80).2330400-92233720368547758083414Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35322056nch1-master-1.nc-master-1.localS-1-5-83-1-1696170770-1110020751-2393360290-24479007253/26/2022 9:02:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 65198312-928F-4229-A2C7-A78E3500E891--FF89B0F1-0967-40E9-979B-4477DDD49B80 successfully disconnected from port .2340400-92233720368547758083413Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35322056nch1-master-1.nc-master-1.localS-1-5-83-1-1696170770-1110020751-2393360290-24479007253/26/2022 9:02:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 65198312-928F-4229-A2C7-A78E3500E891--FF89B0F1-0967-40E9-979B-4477DDD49B80 (Friendly Name: dcaf364f-32ed-4913-b91e-3c3ff9f85e80) successfully connected to port 2879E898-4534-496B-8915-8E78D219893C (Friendly Name: dcaf364f-32ed-4913-b91e-3c3ff9f85e80) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083412Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35325708nch1-master-1.nc-master-1.localS-1-5-83-1-1696170770-1110020751-2393360290-24479007253/26/2022 9:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 65198312-928F-4229-A2C7-A78E3500E891--FF89B0F1-0967-40E9-979B-4477DDD49B80 (Friendly Name: ).2330400-92233720368547758083411Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35325708nch1-master-1.nc-master-1.local3/26/2022 9:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EF033FDF-1F08-45AC-A3DF-4CC31D4D49E5--EEB07884-A570-473A-A4E7-EBF6A8521582 (Friendly Name: f222d2e5-bec9-47c9-9eb3-321c6788db77).2330400-92233720368547758083410Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42603620nch1-master-1.nc-master-1.localS-1-5-83-1-4009967583-1168908040-3276595107-38467863333/26/2022 9:02:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EF033FDF-1F08-45AC-A3DF-4CC31D4D49E5--EEB07884-A570-473A-A4E7-EBF6A8521582 successfully disconnected from port .2340400-92233720368547758083409Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42603620nch1-master-1.nc-master-1.localS-1-5-83-1-4009967583-1168908040-3276595107-38467863333/26/2022 9:02:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BA37C7EB-2811-4D44-A56F-F7BDC0EF5EE3--F208D0ED-41AD-4727-A304-D1613E86AF70 (Friendly Name: 08f22eaa-d9e9-4268-adec-e550bc108da0).2330400-92233720368547758083408Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4004108nch1-master-1.nc-master-1.localS-1-5-83-1-3124217835-1296312337-3187109797-38146497923/26/2022 9:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BA37C7EB-2811-4D44-A56F-F7BDC0EF5EE3--F208D0ED-41AD-4727-A304-D1613E86AF70 successfully disconnected from port .2340400-92233720368547758083407Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4004108nch1-master-1.nc-master-1.localS-1-5-83-1-3124217835-1296312337-3187109797-38146497923/26/2022 9:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BA37C7EB-2811-4D44-A56F-F7BDC0EF5EE3--F208D0ED-41AD-4727-A304-D1613E86AF70 (Friendly Name: 08f22eaa-d9e9-4268-adec-e550bc108da0) successfully connected to port B9AB7CA8-5E1F-4206-8F3F-4CE79C7AC614 (Friendly Name: 08f22eaa-d9e9-4268-adec-e550bc108da0) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083406Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4004108nch1-master-1.nc-master-1.localS-1-5-83-1-3124217835-1296312337-3187109797-38146497923/26/2022 9:02:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BA37C7EB-2811-4D44-A56F-F7BDC0EF5EE3--F208D0ED-41AD-4727-A304-D1613E86AF70 (Friendly Name: ).2330400-92233720368547758083405Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4004108nch1-master-1.nc-master-1.local3/26/2022 9:02:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 687AF281-5D49-4723-AA42-C235677DF20C--1DC37504-708A-483F-AE4D-5C8F7B30B6FF (Friendly Name: 3f4b8c9a-5523-4528-9f82-b2ceaf5d2ca7).2330400-92233720368547758083404Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39405976nch1-master-1.nc-master-1.localS-1-5-83-1-1752887937-1193499977-901923498-2172184073/26/2022 9:01:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 687AF281-5D49-4723-AA42-C235677DF20C--1DC37504-708A-483F-AE4D-5C8F7B30B6FF successfully disconnected from port .2340400-92233720368547758083403Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39405976nch1-master-1.nc-master-1.localS-1-5-83-1-1752887937-1193499977-901923498-2172184073/26/2022 9:01:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403402Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 9:01:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 42F5BC73-B106-421C-BE05-0423B39DF234--A0015472-9C3A-4E5A-8FDF-1CE7A7C4A212 (Friendly Name: 607e9bc9-d63e-4f18-b20e-8c045ee4124b).2330400-92233720368547758083401Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33125452nch1-master-1.nc-master-1.localS-1-5-83-1-1123400819-1109176582-587466174-8883153153/26/2022 9:01:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 42F5BC73-B106-421C-BE05-0423B39DF234--A0015472-9C3A-4E5A-8FDF-1CE7A7C4A212 successfully disconnected from port .2340400-92233720368547758083400Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33125452nch1-master-1.nc-master-1.localS-1-5-83-1-1123400819-1109176582-587466174-8883153153/26/2022 9:01:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be) successfully connected to port 6FC6F5C7-D4B5-4EAC-B3A1-F0707D718C35 (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083399Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21124276nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:01:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: ).2330400-92233720368547758083398Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21124276nch1-master-1.nc-master-1.local3/26/2022 9:01:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be).2330400-92233720368547758083397Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21124276nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:01:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A successfully disconnected from port .2340400-92233720368547758083396Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21124276nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:01:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 434FEB82-CB74-44BC-82E7-BE7D172BB836--C882E35F-A913-497F-821B-3EC23DA979F9 (Friendly Name: 74586d05-0a23-40a4-a976-8b3ddbbcbf41).2330400-92233720368547758083395Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57605680nch1-master-1.nc-master-1.localS-1-5-83-1-1129311106-1153223540-2109663106-9180393193/26/2022 9:00:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 434FEB82-CB74-44BC-82E7-BE7D172BB836--C882E35F-A913-497F-821B-3EC23DA979F9 successfully disconnected from port .2340400-92233720368547758083394Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57605680nch1-master-1.nc-master-1.localS-1-5-83-1-1129311106-1153223540-2109663106-9180393193/26/2022 9:00:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 687AF281-5D49-4723-AA42-C235677DF20C--1DC37504-708A-483F-AE4D-5C8F7B30B6FF (Friendly Name: 3f4b8c9a-5523-4528-9f82-b2ceaf5d2ca7) successfully connected to port F979FD00-D33B-42A3-9807-74E35962F9B3 (Friendly Name: 3f4b8c9a-5523-4528-9f82-b2ceaf5d2ca7) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083393Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39403580nch1-master-1.nc-master-1.localS-1-5-83-1-1752887937-1193499977-901923498-2172184073/26/2022 9:00:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 687AF281-5D49-4723-AA42-C235677DF20C--1DC37504-708A-483F-AE4D-5C8F7B30B6FF (Friendly Name: ).2330400-92233720368547758083392Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39403580nch1-master-1.nc-master-1.local3/26/2022 9:00:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 42F5BC73-B106-421C-BE05-0423B39DF234--A0015472-9C3A-4E5A-8FDF-1CE7A7C4A212 (Friendly Name: 607e9bc9-d63e-4f18-b20e-8c045ee4124b) successfully connected to port C575E55C-E5B6-4DDE-A183-C1E54AC846BA (Friendly Name: 607e9bc9-d63e-4f18-b20e-8c045ee4124b) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083391Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33124132nch1-master-1.nc-master-1.localS-1-5-83-1-1123400819-1109176582-587466174-8883153153/26/2022 9:00:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 42F5BC73-B106-421C-BE05-0423B39DF234--A0015472-9C3A-4E5A-8FDF-1CE7A7C4A212 (Friendly Name: ).2330400-92233720368547758083390Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33124132nch1-master-1.nc-master-1.local3/26/2022 9:00:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C9CE8CC3-868D-4908-AFA8-40C7D6786563--E8B9A9A5-6F85-4B2C-8434-24AB7447D4DF (Friendly Name: a7faa08b-872e-4394-814a-c7ee682c1e20).2330400-92233720368547758083389Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42326000nch1-master-1.nc-master-1.localS-1-5-83-1-3385756867-1225295501-3342903471-16675944543/26/2022 9:00:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C9CE8CC3-868D-4908-AFA8-40C7D6786563--E8B9A9A5-6F85-4B2C-8434-24AB7447D4DF successfully disconnected from port .2340400-92233720368547758083388Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42326000nch1-master-1.nc-master-1.localS-1-5-83-1-3385756867-1225295501-3342903471-16675944543/26/2022 9:00:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be) successfully connected to port 6FC6F5C7-D4B5-4EAC-B3A1-F0707D718C35 (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083387Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21123748nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:00:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: ).2330400-92233720368547758083386Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21123748nch1-master-1.nc-master-1.local3/26/2022 9:00:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be).2330400-92233720368547758083385Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48524224nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:00:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A successfully disconnected from port .2340400-92233720368547758083384Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48524224nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 9:00:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CC045A37-C7EF-4327-B57A-09AEF1FBB31E--2BDEF746-0021-456A-A1D6-3662D2FE1097 (Friendly Name: 191321a7-1166-4f60-ae78-2ca65861dc95).2330400-92233720368547758083383Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4756596nch1-master-1.nc-master-1.localS-1-5-83-1-3422837303-1126680559-2919856821-5151119213/26/2022 9:00:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CC045A37-C7EF-4327-B57A-09AEF1FBB31E--2BDEF746-0021-456A-A1D6-3662D2FE1097 successfully disconnected from port .2340400-92233720368547758083382Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4756596nch1-master-1.nc-master-1.localS-1-5-83-1-3422837303-1126680559-2919856821-5151119213/26/2022 9:00:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 379CC5E6-10D7-4C44-A0AB-3C54BF5B42F7--6E3B7F1A-4D74-4270-8BB9-9C90120A6603 (Friendly Name: 41328fe6-d504-4051-8089-d948e97d3fa2).2330400-92233720368547758083381Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52123232nch1-master-1.nc-master-1.localS-1-5-83-1-933021158-1279529175-1413262240-41483212153/26/2022 8:59:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 379CC5E6-10D7-4C44-A0AB-3C54BF5B42F7--6E3B7F1A-4D74-4270-8BB9-9C90120A6603 successfully disconnected from port .2340400-92233720368547758083380Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52123232nch1-master-1.nc-master-1.localS-1-5-83-1-933021158-1279529175-1413262240-41483212153/26/2022 8:59:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EF033FDF-1F08-45AC-A3DF-4CC31D4D49E5--EEB07884-A570-473A-A4E7-EBF6A8521582 (Friendly Name: f222d2e5-bec9-47c9-9eb3-321c6788db77) successfully connected to port CBA7954C-E029-4C35-8B46-BEB4E23F2525 (Friendly Name: f222d2e5-bec9-47c9-9eb3-321c6788db77) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083379Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42605328nch1-master-1.nc-master-1.localS-1-5-83-1-4009967583-1168908040-3276595107-38467863333/26/2022 8:59:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EF033FDF-1F08-45AC-A3DF-4CC31D4D49E5--EEB07884-A570-473A-A4E7-EBF6A8521582 (Friendly Name: ).2330400-92233720368547758083378Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42605328nch1-master-1.nc-master-1.local3/26/2022 8:59:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EF033FDF-1F08-45AC-A3DF-4CC31D4D49E5--EEB07884-A570-473A-A4E7-EBF6A8521582 (Friendly Name: f222d2e5-bec9-47c9-9eb3-321c6788db77).2330400-92233720368547758083377Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6805768nch1-master-1.nc-master-1.localS-1-5-83-1-4009967583-1168908040-3276595107-38467863333/26/2022 8:59:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EF033FDF-1F08-45AC-A3DF-4CC31D4D49E5--EEB07884-A570-473A-A4E7-EBF6A8521582 successfully disconnected from port .2340400-92233720368547758083376Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6805768nch1-master-1.nc-master-1.localS-1-5-83-1-4009967583-1168908040-3276595107-38467863333/26/2022 8:59:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5398E6D9-6FAA-4173-B154-91375D9A91B7--132C1DE0-EDFC-4FCC-A184-F0C0461B7B2A (Friendly Name: d49002ae-107b-4214-8a27-9406b4f5cade).2330400-92233720368547758083375Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21162964nch1-master-1.nc-master-1.localS-1-5-83-1-1402529497-1098084266-932271281-30797727653/26/2022 8:59:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5398E6D9-6FAA-4173-B154-91375D9A91B7--132C1DE0-EDFC-4FCC-A184-F0C0461B7B2A successfully disconnected from port .2340400-92233720368547758083374Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21162964nch1-master-1.nc-master-1.localS-1-5-83-1-1402529497-1098084266-932271281-30797727653/26/2022 8:59:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EF033FDF-1F08-45AC-A3DF-4CC31D4D49E5--EEB07884-A570-473A-A4E7-EBF6A8521582 (Friendly Name: f222d2e5-bec9-47c9-9eb3-321c6788db77) successfully connected to port CBA7954C-E029-4C35-8B46-BEB4E23F2525 (Friendly Name: f222d2e5-bec9-47c9-9eb3-321c6788db77) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083373Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6805628nch1-master-1.nc-master-1.localS-1-5-83-1-4009967583-1168908040-3276595107-38467863333/26/2022 8:59:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EF033FDF-1F08-45AC-A3DF-4CC31D4D49E5--EEB07884-A570-473A-A4E7-EBF6A8521582 (Friendly Name: ).2330400-92233720368547758083372Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6805628nch1-master-1.nc-master-1.local3/26/2022 8:59:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C9CE8CC3-868D-4908-AFA8-40C7D6786563--E8B9A9A5-6F85-4B2C-8434-24AB7447D4DF (Friendly Name: a7faa08b-872e-4394-814a-c7ee682c1e20) successfully connected to port 733C5C9D-EC68-483B-954B-C64A4D3459EC (Friendly Name: a7faa08b-872e-4394-814a-c7ee682c1e20) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083371Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42325696nch1-master-1.nc-master-1.localS-1-5-83-1-3385756867-1225295501-3342903471-16675944543/26/2022 8:59:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C9CE8CC3-868D-4908-AFA8-40C7D6786563--E8B9A9A5-6F85-4B2C-8434-24AB7447D4DF (Friendly Name: ).2330400-92233720368547758083370Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42325696nch1-master-1.nc-master-1.local3/26/2022 8:59:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5398E6D9-6FAA-4173-B154-91375D9A91B7--132C1DE0-EDFC-4FCC-A184-F0C0461B7B2A (Friendly Name: d49002ae-107b-4214-8a27-9406b4f5cade) successfully connected to port 6BA8551D-7E6B-439D-8D2B-6CD36E001BC9 (Friendly Name: d49002ae-107b-4214-8a27-9406b4f5cade) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083369Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21163164nch1-master-1.nc-master-1.localS-1-5-83-1-1402529497-1098084266-932271281-30797727653/26/2022 8:59:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5398E6D9-6FAA-4173-B154-91375D9A91B7--132C1DE0-EDFC-4FCC-A184-F0C0461B7B2A (Friendly Name: ).2330400-92233720368547758083368Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21163164nch1-master-1.nc-master-1.local3/26/2022 8:59:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5398E6D9-6FAA-4173-B154-91375D9A91B7--132C1DE0-EDFC-4FCC-A184-F0C0461B7B2A (Friendly Name: d49002ae-107b-4214-8a27-9406b4f5cade).2330400-92233720368547758083367Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21163164nch1-master-1.nc-master-1.localS-1-5-83-1-1402529497-1098084266-932271281-30797727653/26/2022 8:59:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5398E6D9-6FAA-4173-B154-91375D9A91B7--132C1DE0-EDFC-4FCC-A184-F0C0461B7B2A successfully disconnected from port .2340400-92233720368547758083366Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21163164nch1-master-1.nc-master-1.localS-1-5-83-1-1402529497-1098084266-932271281-30797727653/26/2022 8:59:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118403365Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:59:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EF033FDF-1F08-45AC-A3DF-4CC31D4D49E5--EEB07884-A570-473A-A4E7-EBF6A8521582 (Friendly Name: f222d2e5-bec9-47c9-9eb3-321c6788db77).2330400-92233720368547758083364Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49965484nch1-master-1.nc-master-1.localS-1-5-83-1-4009967583-1168908040-3276595107-38467863333/26/2022 8:59:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EF033FDF-1F08-45AC-A3DF-4CC31D4D49E5--EEB07884-A570-473A-A4E7-EBF6A8521582 successfully disconnected from port .2340400-92233720368547758083363Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49965484nch1-master-1.nc-master-1.localS-1-5-83-1-4009967583-1168908040-3276595107-38467863333/26/2022 8:59:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5398E6D9-6FAA-4173-B154-91375D9A91B7--132C1DE0-EDFC-4FCC-A184-F0C0461B7B2A (Friendly Name: d49002ae-107b-4214-8a27-9406b4f5cade) successfully connected to port 6BA8551D-7E6B-439D-8D2B-6CD36E001BC9 (Friendly Name: d49002ae-107b-4214-8a27-9406b4f5cade) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083362Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21162072nch1-master-1.nc-master-1.localS-1-5-83-1-1402529497-1098084266-932271281-30797727653/26/2022 8:59:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5398E6D9-6FAA-4173-B154-91375D9A91B7--132C1DE0-EDFC-4FCC-A184-F0C0461B7B2A (Friendly Name: ).2330400-92233720368547758083361Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21162072nch1-master-1.nc-master-1.local3/26/2022 8:59:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 434FEB82-CB74-44BC-82E7-BE7D172BB836--C882E35F-A913-497F-821B-3EC23DA979F9 (Friendly Name: 74586d05-0a23-40a4-a976-8b3ddbbcbf41) successfully connected to port 8DD06AF6-D0AB-4E7E-B1F2-950FE88E92F3 (Friendly Name: 74586d05-0a23-40a4-a976-8b3ddbbcbf41) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083360Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57605680nch1-master-1.nc-master-1.localS-1-5-83-1-1129311106-1153223540-2109663106-9180393193/26/2022 8:59:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 434FEB82-CB74-44BC-82E7-BE7D172BB836--C882E35F-A913-497F-821B-3EC23DA979F9 (Friendly Name: ).2330400-92233720368547758083359Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57605680nch1-master-1.nc-master-1.local3/26/2022 8:59:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403358Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804916nch1-master-1.nc-master-1.local3/26/2022 8:59:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CC045A37-C7EF-4327-B57A-09AEF1FBB31E--2BDEF746-0021-456A-A1D6-3662D2FE1097 (Friendly Name: 191321a7-1166-4f60-ae78-2ca65861dc95) successfully connected to port 1993059C-10FD-4319-B934-0FC91D8504A6 (Friendly Name: 191321a7-1166-4f60-ae78-2ca65861dc95) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083357Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4756596nch1-master-1.nc-master-1.localS-1-5-83-1-3422837303-1126680559-2919856821-5151119213/26/2022 8:59:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CC045A37-C7EF-4327-B57A-09AEF1FBB31E--2BDEF746-0021-456A-A1D6-3662D2FE1097 (Friendly Name: ).2330400-92233720368547758083356Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4756596nch1-master-1.nc-master-1.local3/26/2022 8:59:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 379CC5E6-10D7-4C44-A0AB-3C54BF5B42F7--6E3B7F1A-4D74-4270-8BB9-9C90120A6603 (Friendly Name: 41328fe6-d504-4051-8089-d948e97d3fa2) successfully connected to port 1A8CFF50-A1E0-41BC-9CF3-85BDD94D40DA (Friendly Name: 41328fe6-d504-4051-8089-d948e97d3fa2) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083355Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52123232nch1-master-1.nc-master-1.localS-1-5-83-1-933021158-1279529175-1413262240-41483212153/26/2022 8:58:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 379CC5E6-10D7-4C44-A0AB-3C54BF5B42F7--6E3B7F1A-4D74-4270-8BB9-9C90120A6603 (Friendly Name: ).2330400-92233720368547758083354Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52123232nch1-master-1.nc-master-1.local3/26/2022 8:58:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EF033FDF-1F08-45AC-A3DF-4CC31D4D49E5--EEB07884-A570-473A-A4E7-EBF6A8521582 (Friendly Name: f222d2e5-bec9-47c9-9eb3-321c6788db77) successfully connected to port CBA7954C-E029-4C35-8B46-BEB4E23F2525 (Friendly Name: f222d2e5-bec9-47c9-9eb3-321c6788db77) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083353Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49965484nch1-master-1.nc-master-1.localS-1-5-83-1-4009967583-1168908040-3276595107-38467863333/26/2022 8:58:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EF033FDF-1F08-45AC-A3DF-4CC31D4D49E5--EEB07884-A570-473A-A4E7-EBF6A8521582 (Friendly Name: ).2330400-92233720368547758083352Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49965484nch1-master-1.nc-master-1.local3/26/2022 8:58:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 379CC5E6-10D7-4C44-A0AB-3C54BF5B42F7--6E3B7F1A-4D74-4270-8BB9-9C90120A6603 (Friendly Name: 41328fe6-d504-4051-8089-d948e97d3fa2).2330400-92233720368547758083351Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51326020nch1-master-1.nc-master-1.localS-1-5-83-1-933021158-1279529175-1413262240-41483212153/26/2022 8:58:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 379CC5E6-10D7-4C44-A0AB-3C54BF5B42F7--6E3B7F1A-4D74-4270-8BB9-9C90120A6603 successfully disconnected from port .2340400-92233720368547758083350Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51326020nch1-master-1.nc-master-1.localS-1-5-83-1-933021158-1279529175-1413262240-41483212153/26/2022 8:58:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 00BBB1D5-2099-446A-B8F4-EDE1208EEDAE--85A88BA6-BDD8-4F8B-A54E-3727C3D6836C (Friendly Name: 2393d24c-c12f-4ced-b0e6-3cc4d6bcca51).2330400-92233720368547758083349Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44925028nch1-master-1.nc-master-1.localS-1-5-83-1-12300757-1147805849-3790468280-29348040003/26/2022 8:58:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 00BBB1D5-2099-446A-B8F4-EDE1208EEDAE--85A88BA6-BDD8-4F8B-A54E-3727C3D6836C successfully disconnected from port .2340400-92233720368547758083348Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44925028nch1-master-1.nc-master-1.localS-1-5-83-1-12300757-1147805849-3790468280-29348040003/26/2022 8:58:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A8A8C0BE-C9D2-4772-8A8B-5216013633A0--7AC8C7FE-14DA-491E-A434-BC1AF24CEAA8 (Friendly Name: aa18c074-3c50-4a11-9055-0c0910e8dd41).2330400-92233720368547758083347Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58403772nch1-master-1.nc-master-1.localS-1-5-83-1-2829631678-1198705106-374508426-26877107213/26/2022 8:58:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A8A8C0BE-C9D2-4772-8A8B-5216013633A0--7AC8C7FE-14DA-491E-A434-BC1AF24CEAA8 successfully disconnected from port .2340400-92233720368547758083346Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58403772nch1-master-1.nc-master-1.localS-1-5-83-1-2829631678-1198705106-374508426-26877107213/26/2022 8:58:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 9286EC05-2A9F-480B-A3A7-F3818CF661C1--8089D527-0196-4EE8-ADE2-9F3753162AFE (Friendly Name: 13e6f963-1ad1-433a-9c38-29a63ba6f2c3).2330400-92233720368547758083345Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19565460nch1-master-1.nc-master-1.localS-1-5-83-1-2458315781-1208691359-2180229027-32444227963/26/2022 8:58:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9286EC05-2A9F-480B-A3A7-F3818CF661C1--8089D527-0196-4EE8-ADE2-9F3753162AFE successfully disconnected from port .2340400-92233720368547758083344Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19565460nch1-master-1.nc-master-1.localS-1-5-83-1-2458315781-1208691359-2180229027-32444227963/26/2022 8:58:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be) successfully connected to port 6FC6F5C7-D4B5-4EAC-B3A1-F0707D718C35 (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083343Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48524224nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 8:58:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: ).2330400-92233720368547758083342Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48524224nch1-master-1.nc-master-1.local3/26/2022 8:58:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be).2330400-92233720368547758083341Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48524224nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 8:58:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A successfully disconnected from port .2340400-92233720368547758083340Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48524224nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 8:58:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 379CC5E6-10D7-4C44-A0AB-3C54BF5B42F7--6E3B7F1A-4D74-4270-8BB9-9C90120A6603 (Friendly Name: 41328fe6-d504-4051-8089-d948e97d3fa2) successfully connected to port 1A8CFF50-A1E0-41BC-9CF3-85BDD94D40DA (Friendly Name: 41328fe6-d504-4051-8089-d948e97d3fa2) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083339Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51326020nch1-master-1.nc-master-1.localS-1-5-83-1-933021158-1279529175-1413262240-41483212153/26/2022 8:58:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 379CC5E6-10D7-4C44-A0AB-3C54BF5B42F7--6E3B7F1A-4D74-4270-8BB9-9C90120A6603 (Friendly Name: ).2330400-92233720368547758083338Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51326020nch1-master-1.nc-master-1.local3/26/2022 8:58:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 580C9993-D02B-4435-9C85-437E19042A9D--889210FE-E762-49D7-B91D-1C4A6FC03C10 (Friendly Name: b15eee45-c08c-4bb6-a728-2b42726ae7b4).2330400-92233720368547758083337Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27844788nch1-master-1.nc-master-1.localS-1-5-83-1-1477220755-1144377387-2118354332-26367764733/26/2022 8:58:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 580C9993-D02B-4435-9C85-437E19042A9D--889210FE-E762-49D7-B91D-1C4A6FC03C10 successfully disconnected from port .2340400-92233720368547758083336Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27844788nch1-master-1.nc-master-1.localS-1-5-83-1-1477220755-1144377387-2118354332-26367764733/26/2022 8:58:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 580C9993-D02B-4435-9C85-437E19042A9D--889210FE-E762-49D7-B91D-1C4A6FC03C10 (Friendly Name: b15eee45-c08c-4bb6-a728-2b42726ae7b4) successfully connected to port FA178E0E-5F35-4165-A543-795A64C00C02 (Friendly Name: b15eee45-c08c-4bb6-a728-2b42726ae7b4) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083335Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2784676nch1-master-1.nc-master-1.localS-1-5-83-1-1477220755-1144377387-2118354332-26367764733/26/2022 8:57:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 580C9993-D02B-4435-9C85-437E19042A9D--889210FE-E762-49D7-B91D-1C4A6FC03C10 (Friendly Name: ).2330400-92233720368547758083334Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2784676nch1-master-1.nc-master-1.local3/26/2022 8:57:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9286EC05-2A9F-480B-A3A7-F3818CF661C1--8089D527-0196-4EE8-ADE2-9F3753162AFE (Friendly Name: 13e6f963-1ad1-433a-9c38-29a63ba6f2c3) successfully connected to port D471F46B-AA4A-44F9-ADD5-19E4CCA8C6E2 (Friendly Name: 13e6f963-1ad1-433a-9c38-29a63ba6f2c3) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083333Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19565460nch1-master-1.nc-master-1.localS-1-5-83-1-2458315781-1208691359-2180229027-32444227963/26/2022 8:57:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 9286EC05-2A9F-480B-A3A7-F3818CF661C1--8089D527-0196-4EE8-ADE2-9F3753162AFE (Friendly Name: ).2330400-92233720368547758083332Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19565460nch1-master-1.nc-master-1.local3/26/2022 8:57:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0530D923-A1D8-49CE-8235-FE85B5129326--D67B3C6E-5B4E-4E53-888C-822E434ED64C (Friendly Name: 09a2b045-fb00-44cf-929e-188526c6e172).2330400-92233720368547758083331Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39366136nch1-master-1.nc-master-1.localS-1-5-83-1-87087395-1238278616-2248029570-6471727893/26/2022 8:57:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0530D923-A1D8-49CE-8235-FE85B5129326--D67B3C6E-5B4E-4E53-888C-822E434ED64C successfully disconnected from port .2340400-92233720368547758083330Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39366136nch1-master-1.nc-master-1.localS-1-5-83-1-87087395-1238278616-2248029570-6471727893/26/2022 8:57:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0530D923-A1D8-49CE-8235-FE85B5129326--D67B3C6E-5B4E-4E53-888C-822E434ED64C (Friendly Name: 09a2b045-fb00-44cf-929e-188526c6e172) successfully connected to port 5C2697F5-B267-4987-A331-334D1006B6B3 (Friendly Name: 09a2b045-fb00-44cf-929e-188526c6e172) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083329Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39365500nch1-master-1.nc-master-1.localS-1-5-83-1-87087395-1238278616-2248029570-6471727893/26/2022 8:57:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0530D923-A1D8-49CE-8235-FE85B5129326--D67B3C6E-5B4E-4E53-888C-822E434ED64C (Friendly Name: ).2330400-92233720368547758083328Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39365500nch1-master-1.nc-master-1.local3/26/2022 8:57:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A8A8C0BE-C9D2-4772-8A8B-5216013633A0--7AC8C7FE-14DA-491E-A434-BC1AF24CEAA8 (Friendly Name: aa18c074-3c50-4a11-9055-0c0910e8dd41) successfully connected to port 4BC89C8F-B946-48A8-BB20-7ADE72593B50 (Friendly Name: aa18c074-3c50-4a11-9055-0c0910e8dd41) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083327Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58405944nch1-master-1.nc-master-1.localS-1-5-83-1-2829631678-1198705106-374508426-26877107213/26/2022 8:57:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A8A8C0BE-C9D2-4772-8A8B-5216013633A0--7AC8C7FE-14DA-491E-A434-BC1AF24CEAA8 (Friendly Name: ).2330400-92233720368547758083326Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58405944nch1-master-1.nc-master-1.local3/26/2022 8:57:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6B017B56-15D7-4559-A3DE-321C2F5AC8E6--208993BA-9315-4F5F-95CB-9ADA995BCA32 (Friendly Name: e5c0bdb1-41fd-4c45-b5d0-737709a48337).2330400-92233720368547758083325Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56045612nch1-master-1.nc-master-1.localS-1-5-83-1-1795259222-1163466199-473095843-38718899673/26/2022 8:57:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6B017B56-15D7-4559-A3DE-321C2F5AC8E6--208993BA-9315-4F5F-95CB-9ADA995BCA32 successfully disconnected from port .2340400-92233720368547758083324Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56045612nch1-master-1.nc-master-1.localS-1-5-83-1-1795259222-1163466199-473095843-38718899673/26/2022 8:57:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D24CDFE2-5551-4FDB-B2F8-DF7B138B62E2--8B84ABE6-61CB-46BF-8339-787F2C9E4546 (Friendly Name: 2da49cd1-c1ff-4ee7-ae87-4672c4430a08).2330400-92233720368547758083323Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54205332nch1-master-1.nc-master-1.localS-1-5-83-1-3528253410-1339774289-2078275762-37981089473/26/2022 8:57:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D24CDFE2-5551-4FDB-B2F8-DF7B138B62E2--8B84ABE6-61CB-46BF-8339-787F2C9E4546 successfully disconnected from port .2340400-92233720368547758083322Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54205332nch1-master-1.nc-master-1.localS-1-5-83-1-3528253410-1339774289-2078275762-37981089473/26/2022 8:57:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic FAB4CF3B-DCF3-4A10-AD8E-2FF0F4D071FF--ACD1F717-B3E8-4919-99E3-6D99B85EA432 (Friendly Name: 4c536011-78ac-4759-af99-8fc9826030cd).2330400-92233720368547758083321Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59843104nch1-master-1.nc-master-1.localS-1-5-83-1-4206153531-1242619123-4029648557-42856491403/26/2022 8:57:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FAB4CF3B-DCF3-4A10-AD8E-2FF0F4D071FF--ACD1F717-B3E8-4919-99E3-6D99B85EA432 successfully disconnected from port .2340400-92233720368547758083320Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59843104nch1-master-1.nc-master-1.localS-1-5-83-1-4206153531-1242619123-4029648557-42856491403/26/2022 8:57:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FAB4CF3B-DCF3-4A10-AD8E-2FF0F4D071FF--ACD1F717-B3E8-4919-99E3-6D99B85EA432 (Friendly Name: 4c536011-78ac-4759-af99-8fc9826030cd) successfully connected to port A5F836A7-38A7-44FB-B555-7F8CF2147279 (Friendly Name: 4c536011-78ac-4759-af99-8fc9826030cd) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083319Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59846084nch1-master-1.nc-master-1.localS-1-5-83-1-4206153531-1242619123-4029648557-42856491403/26/2022 8:57:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic FAB4CF3B-DCF3-4A10-AD8E-2FF0F4D071FF--ACD1F717-B3E8-4919-99E3-6D99B85EA432 (Friendly Name: ).2330400-92233720368547758083318Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59846084nch1-master-1.nc-master-1.local3/26/2022 8:57:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 09BDE592-0BDA-4494-B90E-EEDECAA16815--6B3275C6-C9C6-486C-B949-53FC9A3D8618 (Friendly Name: 5d9bf69f-609d-48c4-baa5-cb7b9c6889d2).2330400-92233720368547758083317Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53763956nch1-master-1.nc-master-1.localS-1-5-83-1-163440018-1150553050-3740143289-3591786983/26/2022 8:57:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 09BDE592-0BDA-4494-B90E-EEDECAA16815--6B3275C6-C9C6-486C-B949-53FC9A3D8618 successfully disconnected from port .2340400-92233720368547758083316Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53763956nch1-master-1.nc-master-1.localS-1-5-83-1-163440018-1150553050-3740143289-3591786983/26/2022 8:57:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 09BDE592-0BDA-4494-B90E-EEDECAA16815--6B3275C6-C9C6-486C-B949-53FC9A3D8618 (Friendly Name: 5d9bf69f-609d-48c4-baa5-cb7b9c6889d2) successfully connected to port EE2E1AC7-A3D7-4885-AC9A-BBF8368AB19F (Friendly Name: 5d9bf69f-609d-48c4-baa5-cb7b9c6889d2) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083315Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53765876nch1-master-1.nc-master-1.localS-1-5-83-1-163440018-1150553050-3740143289-3591786983/26/2022 8:56:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 09BDE592-0BDA-4494-B90E-EEDECAA16815--6B3275C6-C9C6-486C-B949-53FC9A3D8618 (Friendly Name: ).2330400-92233720368547758083314Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53765876nch1-master-1.nc-master-1.local3/26/2022 8:56:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6B017B56-15D7-4559-A3DE-321C2F5AC8E6--208993BA-9315-4F5F-95CB-9ADA995BCA32 (Friendly Name: e5c0bdb1-41fd-4c45-b5d0-737709a48337) successfully connected to port 68C64F4A-5032-4274-802F-D450F1C9DFE7 (Friendly Name: e5c0bdb1-41fd-4c45-b5d0-737709a48337) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083313Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56044896nch1-master-1.nc-master-1.localS-1-5-83-1-1795259222-1163466199-473095843-38718899673/26/2022 8:56:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6B017B56-15D7-4559-A3DE-321C2F5AC8E6--208993BA-9315-4F5F-95CB-9ADA995BCA32 (Friendly Name: ).2330400-92233720368547758083312Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56044896nch1-master-1.nc-master-1.local3/26/2022 8:56:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 00BBB1D5-2099-446A-B8F4-EDE1208EEDAE--85A88BA6-BDD8-4F8B-A54E-3727C3D6836C (Friendly Name: 2393d24c-c12f-4ced-b0e6-3cc4d6bcca51) successfully connected to port EDD8C4B8-47EF-4F9B-9951-354F97726781 (Friendly Name: 2393d24c-c12f-4ced-b0e6-3cc4d6bcca51) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083311Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44924136nch1-master-1.nc-master-1.localS-1-5-83-1-12300757-1147805849-3790468280-29348040003/26/2022 8:56:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 00BBB1D5-2099-446A-B8F4-EDE1208EEDAE--85A88BA6-BDD8-4F8B-A54E-3727C3D6836C (Friendly Name: ).2330400-92233720368547758083310Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44924136nch1-master-1.nc-master-1.local3/26/2022 8:56:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6B017B56-15D7-4559-A3DE-321C2F5AC8E6--208993BA-9315-4F5F-95CB-9ADA995BCA32 (Friendly Name: e5c0bdb1-41fd-4c45-b5d0-737709a48337).2330400-92233720368547758083309Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2432888nch1-master-1.nc-master-1.localS-1-5-83-1-1795259222-1163466199-473095843-38718899673/26/2022 8:56:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6B017B56-15D7-4559-A3DE-321C2F5AC8E6--208993BA-9315-4F5F-95CB-9ADA995BCA32 successfully disconnected from port .2340400-92233720368547758083308Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2432888nch1-master-1.nc-master-1.localS-1-5-83-1-1795259222-1163466199-473095843-38718899673/26/2022 8:56:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1A2811D8-3999-4855-8B6F-BE58D29B5C9F--EA578D4C-4ECF-41C8-ACE5-2D1F5718B963 (Friendly Name: 9eb6cb36-804c-41b3-a477-f3c09fc288ee).2330400-92233720368547758083307Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52085412nch1-master-1.nc-master-1.localS-1-5-83-1-438833624-1213544857-1488875403-26736465463/26/2022 8:56:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1A2811D8-3999-4855-8B6F-BE58D29B5C9F--EA578D4C-4ECF-41C8-ACE5-2D1F5718B963 successfully disconnected from port .2340400-92233720368547758083306Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52085412nch1-master-1.nc-master-1.localS-1-5-83-1-438833624-1213544857-1488875403-26736465463/26/2022 8:56:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be) successfully connected to port 6FC6F5C7-D4B5-4EAC-B3A1-F0707D718C35 (Friendly Name: 5655cd88-9896-4588-87bb-f6ba5c5c42be) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083305Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48524224nch1-master-1.nc-master-1.localS-1-5-83-1-350903201-1241084543-3021275562-29386364933/26/2022 8:56:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 14EA5BA1-727F-49F9-AA01-15B4CD0828AF--DD033974-1093-4A80-84D2-32CB7BE97D1A (Friendly Name: ).2330400-92233720368547758083304Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48524224nch1-master-1.nc-master-1.local3/26/2022 8:56:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1A2811D8-3999-4855-8B6F-BE58D29B5C9F--EA578D4C-4ECF-41C8-ACE5-2D1F5718B963 (Friendly Name: 9eb6cb36-804c-41b3-a477-f3c09fc288ee) successfully connected to port F18D1F13-CED0-4E67-8E0E-49934056935C (Friendly Name: 9eb6cb36-804c-41b3-a477-f3c09fc288ee) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083303Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52085412nch1-master-1.nc-master-1.localS-1-5-83-1-438833624-1213544857-1488875403-26736465463/26/2022 8:56:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1A2811D8-3999-4855-8B6F-BE58D29B5C9F--EA578D4C-4ECF-41C8-ACE5-2D1F5718B963 (Friendly Name: ).2330400-92233720368547758083302Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52085412nch1-master-1.nc-master-1.local3/26/2022 8:56:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D24CDFE2-5551-4FDB-B2F8-DF7B138B62E2--8B84ABE6-61CB-46BF-8339-787F2C9E4546 (Friendly Name: 2da49cd1-c1ff-4ee7-ae87-4672c4430a08) successfully connected to port 08CBBFEB-EE40-4ACE-A832-1558852E29D9 (Friendly Name: 2da49cd1-c1ff-4ee7-ae87-4672c4430a08) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083301Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54205332nch1-master-1.nc-master-1.localS-1-5-83-1-3528253410-1339774289-2078275762-37981089473/26/2022 8:56:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D24CDFE2-5551-4FDB-B2F8-DF7B138B62E2--8B84ABE6-61CB-46BF-8339-787F2C9E4546 (Friendly Name: ).2330400-92233720368547758083300Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54205332nch1-master-1.nc-master-1.local3/26/2022 8:56:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6B017B56-15D7-4559-A3DE-321C2F5AC8E6--208993BA-9315-4F5F-95CB-9ADA995BCA32 (Friendly Name: e5c0bdb1-41fd-4c45-b5d0-737709a48337) successfully connected to port 68C64F4A-5032-4274-802F-D450F1C9DFE7 (Friendly Name: e5c0bdb1-41fd-4c45-b5d0-737709a48337) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083299Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2432888nch1-master-1.nc-master-1.localS-1-5-83-1-1795259222-1163466199-473095843-38718899673/26/2022 8:56:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6B017B56-15D7-4559-A3DE-321C2F5AC8E6--208993BA-9315-4F5F-95CB-9ADA995BCA32 (Friendly Name: ).2330400-92233720368547758083298Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2432888nch1-master-1.nc-master-1.local3/26/2022 8:56:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0B06CA99-ACF5-40E9-A27C-134DE43283B1--6A7B96C6-DE61-42D1-BF07-B9C7178D9395 (Friendly Name: 7ffc94eb-46a6-4da8-a517-632fac7bd7b9).2330400-92233720368547758083297Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25365004nch1-master-1.nc-master-1.localS-1-5-83-1-184994457-1089055989-1293122722-29781654763/26/2022 8:55:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0B06CA99-ACF5-40E9-A27C-134DE43283B1--6A7B96C6-DE61-42D1-BF07-B9C7178D9395 successfully disconnected from port .2340400-92233720368547758083296Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25365004nch1-master-1.nc-master-1.localS-1-5-83-1-184994457-1089055989-1293122722-29781654763/26/2022 8:55:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0B06CA99-ACF5-40E9-A27C-134DE43283B1--6A7B96C6-DE61-42D1-BF07-B9C7178D9395 (Friendly Name: 7ffc94eb-46a6-4da8-a517-632fac7bd7b9) successfully connected to port 48A91221-3EB2-48BE-B867-4D5C22D28F15 (Friendly Name: 7ffc94eb-46a6-4da8-a517-632fac7bd7b9) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083295Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2536844nch1-master-1.nc-master-1.localS-1-5-83-1-184994457-1089055989-1293122722-29781654763/26/2022 8:55:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0B06CA99-ACF5-40E9-A27C-134DE43283B1--6A7B96C6-DE61-42D1-BF07-B9C7178D9395 (Friendly Name: ).2330400-92233720368547758083294Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2536844nch1-master-1.nc-master-1.local3/26/2022 8:55:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C1638DC1-F4FF-427F-83E4-0D0FE91203A7--4E760F49-C5E7-46B5-914B-9FD4DA6B5254 (Friendly Name: ba7ea312-d565-4f8b-bfb0-b923476e5902).2330400-92233720368547758083293Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47001736nch1-master-1.nc-master-1.localS-1-5-83-1-3244527041-1115682047-252568707-28019965213/26/2022 8:55:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C1638DC1-F4FF-427F-83E4-0D0FE91203A7--4E760F49-C5E7-46B5-914B-9FD4DA6B5254 successfully disconnected from port .2340400-92233720368547758083292Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47001736nch1-master-1.nc-master-1.localS-1-5-83-1-3244527041-1115682047-252568707-28019965213/26/2022 8:55:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C1638DC1-F4FF-427F-83E4-0D0FE91203A7--4E760F49-C5E7-46B5-914B-9FD4DA6B5254 (Friendly Name: ba7ea312-d565-4f8b-bfb0-b923476e5902) successfully connected to port F680351F-ED4C-4DAC-83F3-BAF46C869BAF (Friendly Name: ba7ea312-d565-4f8b-bfb0-b923476e5902) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083291Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47001736nch1-master-1.nc-master-1.localS-1-5-83-1-3244527041-1115682047-252568707-28019965213/26/2022 8:55:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C1638DC1-F4FF-427F-83E4-0D0FE91203A7--4E760F49-C5E7-46B5-914B-9FD4DA6B5254 (Friendly Name: ).2330400-92233720368547758083290Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47001736nch1-master-1.nc-master-1.local3/26/2022 8:55:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Registry service entered the stopped state.7036016384400-91873432398358118403289Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612nch1-master-1.nc-master-1.local3/26/2022 8:55:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A82FCFCA-144B-4691-BAF4-51F6C694AC7C--6B92D531-19C7-4331-A3E0-6463B7AC71A3 (Friendly Name: 5f93aa05-948a-4603-ac9e-ad8d14873f3f).2330400-92233720368547758083288Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61322772nch1-master-1.nc-master-1.localS-1-5-83-1-2821705674-1183913035-4132566202-20916850623/26/2022 8:55:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A82FCFCA-144B-4691-BAF4-51F6C694AC7C--6B92D531-19C7-4331-A3E0-6463B7AC71A3 successfully disconnected from port .2340400-92233720368547758083287Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61322772nch1-master-1.nc-master-1.localS-1-5-83-1-2821705674-1183913035-4132566202-20916850623/26/2022 8:55:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403286Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612nch1-master-1.nc-master-1.local3/26/2022 8:55:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5C6663E5-BAF9-4937-8B3D-B125DDFD7AE8--78E18A3D-D3E2-4842-94BC-724D3A77C255 (Friendly Name: bc6395f6-f2f3-4aa7-912e-2231739b4607).2330400-92233720368547758083285Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59565924nch1-master-1.nc-master-1.localS-1-5-83-1-1550214117-1228389113-632372619-39003744933/26/2022 8:55:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5C6663E5-BAF9-4937-8B3D-B125DDFD7AE8--78E18A3D-D3E2-4842-94BC-724D3A77C255 successfully disconnected from port .2340400-92233720368547758083284Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59565924nch1-master-1.nc-master-1.localS-1-5-83-1-1550214117-1228389113-632372619-39003744933/26/2022 8:55:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0846D51E-1E85-4CF2-8A73-2FBC0E7CEF27--ADFD86D5-ED5A-4B58-AA09-F2CA82C97D4F (Friendly Name: 61358ffa-a2dd-4354-a24e-4e1a7782c3c8).2330400-92233720368547758083283Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57684232nch1-master-1.nc-master-1.localS-1-5-83-1-138859806-1290935941-3157226378-6700062863/26/2022 8:55:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0846D51E-1E85-4CF2-8A73-2FBC0E7CEF27--ADFD86D5-ED5A-4B58-AA09-F2CA82C97D4F successfully disconnected from port .2340400-92233720368547758083282Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57684232nch1-master-1.nc-master-1.localS-1-5-83-1-138859806-1290935941-3157226378-6700062863/26/2022 8:55:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403281Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612nch1-master-1.nc-master-1.local3/26/2022 8:55:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5C6663E5-BAF9-4937-8B3D-B125DDFD7AE8--78E18A3D-D3E2-4842-94BC-724D3A77C255 (Friendly Name: bc6395f6-f2f3-4aa7-912e-2231739b4607) successfully connected to port F53A5253-3010-480A-93B6-8BF6FD917638 (Friendly Name: bc6395f6-f2f3-4aa7-912e-2231739b4607) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083280Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59565924nch1-master-1.nc-master-1.localS-1-5-83-1-1550214117-1228389113-632372619-39003744933/26/2022 8:54:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5C6663E5-BAF9-4937-8B3D-B125DDFD7AE8--78E18A3D-D3E2-4842-94BC-724D3A77C255 (Friendly Name: ).2330400-92233720368547758083279Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59565924nch1-master-1.nc-master-1.local3/26/2022 8:54:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 4ED346DC-5296-4CF7-956A-156BE15A06C0--057D1BA7-4E3A-49A2-98A4-BCCE14294A44 (Friendly Name: b23662ab-35ef-424a-a830-2cdfa6ba7902).2330400-92233720368547758083278Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28122912nch1-master-1.nc-master-1.localS-1-5-83-1-1322469084-1291276950-1796565653-32216419533/26/2022 8:54:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4ED346DC-5296-4CF7-956A-156BE15A06C0--057D1BA7-4E3A-49A2-98A4-BCCE14294A44 successfully disconnected from port .2340400-92233720368547758083277Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28122912nch1-master-1.nc-master-1.localS-1-5-83-1-1322469084-1291276950-1796565653-32216419533/26/2022 8:54:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E5DDE90A-7B59-4A3F-BA00-870BC128F1DB--A08268AF-56A5-4C2E-A908-B3C644EA507B (Friendly Name: d1f9f2eb-0ee1-479e-b5c0-022814a80bd6).2330400-92233720368547758083276Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56125664nch1-master-1.nc-master-1.localS-1-5-83-1-3856525578-1245674329-193396922-36900149133/26/2022 8:54:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E5DDE90A-7B59-4A3F-BA00-870BC128F1DB--A08268AF-56A5-4C2E-A908-B3C644EA507B successfully disconnected from port .2340400-92233720368547758083275Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56125664nch1-master-1.nc-master-1.localS-1-5-83-1-3856525578-1245674329-193396922-36900149133/26/2022 8:54:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0846D51E-1E85-4CF2-8A73-2FBC0E7CEF27--ADFD86D5-ED5A-4B58-AA09-F2CA82C97D4F (Friendly Name: 61358ffa-a2dd-4354-a24e-4e1a7782c3c8) successfully connected to port 6AAF6BF8-83A7-47B8-B96F-91A9AFA10033 (Friendly Name: 61358ffa-a2dd-4354-a24e-4e1a7782c3c8) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083274Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57685756nch1-master-1.nc-master-1.localS-1-5-83-1-138859806-1290935941-3157226378-6700062863/26/2022 8:54:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0846D51E-1E85-4CF2-8A73-2FBC0E7CEF27--ADFD86D5-ED5A-4B58-AA09-F2CA82C97D4F (Friendly Name: ).2330400-92233720368547758083273Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57685756nch1-master-1.nc-master-1.local3/26/2022 8:54:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4ED346DC-5296-4CF7-956A-156BE15A06C0--057D1BA7-4E3A-49A2-98A4-BCCE14294A44 (Friendly Name: b23662ab-35ef-424a-a830-2cdfa6ba7902) successfully connected to port A950B9C7-05C2-41FB-96DF-8746F1FCC704 (Friendly Name: b23662ab-35ef-424a-a830-2cdfa6ba7902) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083272Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28122912nch1-master-1.nc-master-1.localS-1-5-83-1-1322469084-1291276950-1796565653-32216419533/26/2022 8:54:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 4ED346DC-5296-4CF7-956A-156BE15A06C0--057D1BA7-4E3A-49A2-98A4-BCCE14294A44 (Friendly Name: ).2330400-92233720368547758083271Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28122912nch1-master-1.nc-master-1.local3/26/2022 8:54:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E5DDE90A-7B59-4A3F-BA00-870BC128F1DB--A08268AF-56A5-4C2E-A908-B3C644EA507B (Friendly Name: d1f9f2eb-0ee1-479e-b5c0-022814a80bd6) successfully connected to port 66FD2949-6821-46B6-A4BC-DDC6B5083867 (Friendly Name: d1f9f2eb-0ee1-479e-b5c0-022814a80bd6) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083270Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56125664nch1-master-1.nc-master-1.localS-1-5-83-1-3856525578-1245674329-193396922-36900149133/26/2022 8:54:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E5DDE90A-7B59-4A3F-BA00-870BC128F1DB--A08268AF-56A5-4C2E-A908-B3C644EA507B (Friendly Name: ).2330400-92233720368547758083269Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56125664nch1-master-1.nc-master-1.local3/26/2022 8:54:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic FC64C5F8-9BE3-409C-9A54-C673BC6B7CAC--0ED740E1-45C2-4C08-A191-C51D0F10F4DD (Friendly Name: 45b38ca2-4fe0-430a-bebd-437115db1ae6).2330400-92233720368547758083268Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37604844nch1-master-1.nc-master-1.localS-1-5-83-1-4234462712-1084005347-1942377626-28938351963/26/2022 8:54:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FC64C5F8-9BE3-409C-9A54-C673BC6B7CAC--0ED740E1-45C2-4C08-A191-C51D0F10F4DD successfully disconnected from port .2340400-92233720368547758083267Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37604844nch1-master-1.nc-master-1.localS-1-5-83-1-4234462712-1084005347-1942377626-28938351963/26/2022 8:54:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CFA21115-CEBD-48F5-9791-94E244BB4160--DB969153-186F-47EC-A40E-00DE6C282A97 (Friendly Name: d20c4d66-5919-4014-97bf-e9934b31149c).2330400-92233720368547758083266Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48244768nch1-master-1.nc-master-1.localS-1-5-83-1-3483504917-1224068797-3801387415-16149205163/26/2022 8:54:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CFA21115-CEBD-48F5-9791-94E244BB4160--DB969153-186F-47EC-A40E-00DE6C282A97 successfully disconnected from port .2340400-92233720368547758083265Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48244768nch1-master-1.nc-master-1.localS-1-5-83-1-3483504917-1224068797-3801387415-16149205163/26/2022 8:54:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2FC5C6FE-7BD4-44CD-83DB-5D07FD75CADE--27DA0F72-9AA2-42EE-A09E-90494C003FCA (Friendly Name: fb15c4ca-1f95-4280-be6b-6b881e010ddd).2330400-92233720368547758083264Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24243164nch1-master-1.nc-master-1.localS-1-5-83-1-801490686-1154317268-123591555-37378104293/26/2022 8:53:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2FC5C6FE-7BD4-44CD-83DB-5D07FD75CADE--27DA0F72-9AA2-42EE-A09E-90494C003FCA successfully disconnected from port .2340400-92233720368547758083263Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24243164nch1-master-1.nc-master-1.localS-1-5-83-1-801490686-1154317268-123591555-37378104293/26/2022 8:53:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic DADDC1EB-94CC-4373-A129-DA3F9204AB37--401FDD49-0FD1-4C69-B4BB-4FA5E04DE498 (Friendly Name: 988b452a-5ed3-47d7-8ebe-f1dfe42561e6).2330400-92233720368547758083262Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53244416nch1-master-1.nc-master-1.localS-1-5-83-1-3671966187-1131648204-1071262113-9339547063/26/2022 8:53:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DADDC1EB-94CC-4373-A129-DA3F9204AB37--401FDD49-0FD1-4C69-B4BB-4FA5E04DE498 successfully disconnected from port .2340400-92233720368547758083261Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53244416nch1-master-1.nc-master-1.localS-1-5-83-1-3671966187-1131648204-1071262113-9339547063/26/2022 8:53:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2FC5C6FE-7BD4-44CD-83DB-5D07FD75CADE--27DA0F72-9AA2-42EE-A09E-90494C003FCA (Friendly Name: fb15c4ca-1f95-4280-be6b-6b881e010ddd) successfully connected to port 4DE05698-88C5-42D7-A84A-166623502208 (Friendly Name: fb15c4ca-1f95-4280-be6b-6b881e010ddd) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083260Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24243164nch1-master-1.nc-master-1.localS-1-5-83-1-801490686-1154317268-123591555-37378104293/26/2022 8:53:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2FC5C6FE-7BD4-44CD-83DB-5D07FD75CADE--27DA0F72-9AA2-42EE-A09E-90494C003FCA (Friendly Name: ).2330400-92233720368547758083259Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24243164nch1-master-1.nc-master-1.local3/26/2022 8:53:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-73-55-E8 has moved from port E975C910-07A7-477B-8C79-5FAAF65C0117 (Friendly Name: 988b452a-5ed3-47d7-8ebe-f1dfe42561e6) to port E975C910-07A7-477B-8C79-5FAAF65C0117 (Friendly Name: 988b452a-5ed3-47d7-8ebe-f1dfe42561e6).250410180-92233720368547758083258Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24683828nch1-master-1.nc-master-1.local3/26/2022 8:53:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DADDC1EB-94CC-4373-A129-DA3F9204AB37--401FDD49-0FD1-4C69-B4BB-4FA5E04DE498 (Friendly Name: 988b452a-5ed3-47d7-8ebe-f1dfe42561e6) successfully connected to port E975C910-07A7-477B-8C79-5FAAF65C0117 (Friendly Name: 988b452a-5ed3-47d7-8ebe-f1dfe42561e6) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083257Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53244560nch1-master-1.nc-master-1.localS-1-5-83-1-3671966187-1131648204-1071262113-9339547063/26/2022 8:53:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic DADDC1EB-94CC-4373-A129-DA3F9204AB37--401FDD49-0FD1-4C69-B4BB-4FA5E04DE498 (Friendly Name: ).2330400-92233720368547758083256Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53245300nch1-master-1.nc-master-1.local3/26/2022 8:53:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118403255Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612nch1-master-1.nc-master-1.local3/26/2022 8:53:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E2DAA39F-047E-4566-88AD-9200B24933BA--B7A4A895-6434-488E-917A-3CCD9DD87AD1 (Friendly Name: 1de64d43-e5c1-4912-bce7-2fb0a645bc07).2330400-92233720368547758083254Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51563996nch1-master-1.nc-master-1.localS-1-5-83-1-3805979551-1164313726-9612680-31239233783/26/2022 8:53:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E2DAA39F-047E-4566-88AD-9200B24933BA--B7A4A895-6434-488E-917A-3CCD9DD87AD1 successfully disconnected from port .2340400-92233720368547758083253Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51563996nch1-master-1.nc-master-1.localS-1-5-83-1-3805979551-1164313726-9612680-31239233783/26/2022 8:53:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 22E1A89C-9671-4F61-A26E-D1FCC7F27859--57C7E395-0676-4F1A-98F2-27CFC1DED03A (Friendly Name: fb15c4ca-1f95-4280-be6b-6b881e010ddd).2330400-92233720368547758083252Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40043308nch1-master-1.nc-master-1.localS-1-5-83-1-585214108-1331795569-4241583778-15010986953/26/2022 8:53:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 22E1A89C-9671-4F61-A26E-D1FCC7F27859--57C7E395-0676-4F1A-98F2-27CFC1DED03A successfully disconnected from port .2340400-92233720368547758083251Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40043308nch1-master-1.nc-master-1.localS-1-5-83-1-585214108-1331795569-4241583778-15010986953/26/2022 8:53:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118403250Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612nch1-master-1.nc-master-1.local3/26/2022 8:53:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D5B4CF59-9EFC-4E75-8179-7300FE6CCE5C--0D130F13-5771-4FE0-ADBD-145CC41CCD93 (Friendly Name: c7df1940-2f47-4d41-b48f-8078b14b9cc2).2330400-92233720368547758083249Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2504844nch1-master-1.nc-master-1.localS-1-5-83-1-3585396569-1316331260-7567745-15570321903/26/2022 8:53:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D5B4CF59-9EFC-4E75-8179-7300FE6CCE5C--0D130F13-5771-4FE0-ADBD-145CC41CCD93 successfully disconnected from port .2340400-92233720368547758083248Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2504844nch1-master-1.nc-master-1.localS-1-5-83-1-3585396569-1316331260-7567745-15570321903/26/2022 8:53:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E2DAA39F-047E-4566-88AD-9200B24933BA--B7A4A895-6434-488E-917A-3CCD9DD87AD1 (Friendly Name: 1de64d43-e5c1-4912-bce7-2fb0a645bc07) successfully connected to port 23241532-D6EC-46EE-9291-2A83DCF2DBC4 (Friendly Name: 1de64d43-e5c1-4912-bce7-2fb0a645bc07) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083247Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51565228nch1-master-1.nc-master-1.localS-1-5-83-1-3805979551-1164313726-9612680-31239233783/26/2022 8:53:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E2DAA39F-047E-4566-88AD-9200B24933BA--B7A4A895-6434-488E-917A-3CCD9DD87AD1 (Friendly Name: ).2330400-92233720368547758083246Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51565228nch1-master-1.nc-master-1.local3/26/2022 8:53:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A82FCFCA-144B-4691-BAF4-51F6C694AC7C--6B92D531-19C7-4331-A3E0-6463B7AC71A3 (Friendly Name: 5f93aa05-948a-4603-ac9e-ad8d14873f3f) successfully connected to port 69FDCD39-983F-4B4B-BDBE-278FCCF757F7 (Friendly Name: 5f93aa05-948a-4603-ac9e-ad8d14873f3f) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083245Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61322772nch1-master-1.nc-master-1.localS-1-5-83-1-2821705674-1183913035-4132566202-20916850623/26/2022 8:53:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A82FCFCA-144B-4691-BAF4-51F6C694AC7C--6B92D531-19C7-4331-A3E0-6463B7AC71A3 (Friendly Name: ).2330400-92233720368547758083244Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61322772nch1-master-1.nc-master-1.local3/26/2022 8:53:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server. This event occurs once per boot of the server on the first time a client uses NTLM with this server. NTLM is a weaker authentication mechanism. Please check: Which applications are using NTLM authentication? Are there configuration issues preventing the use of stronger authentication such as Kerberos authentication? If NTLM must be supported, is Extended Protection configured? Details on how to complete these checks can be found at http://go.microsoft.com/fwlink/?LinkId=225699.603800300360287970189639683243LsaSrv199fe037-2b82-40a9-82ac-e1d46c792b99System00nch1-master-1.nc-master-1.local3/26/2022 8:53:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D39F6729-F020-4EEE-883E-9BF7E354075B--1B9B3FBE-D98F-456F-9E15-9E4D05F4C3FA (Friendly Name: 6fa41142-bff0-4477-bc27-c57a3d2eb5fd).2330400-92233720368547758083242Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26883752nch1-master-1.nc-master-1.localS-1-5-83-1-3550439209-1324281888-4154146440-15272071393/26/2022 8:53:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D39F6729-F020-4EEE-883E-9BF7E354075B--1B9B3FBE-D98F-456F-9E15-9E4D05F4C3FA successfully disconnected from port .2340400-92233720368547758083241Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26883752nch1-master-1.nc-master-1.localS-1-5-83-1-3550439209-1324281888-4154146440-15272071393/26/2022 8:53:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 83FF9FEC-358B-434A-936D-5F3306D10ED8--2F3C9FB5-33BD-4AF5-8EEA-C3F8EC7FED31 (Friendly Name: 93403676-99cc-45f4-a873-3df0d3991850).2330400-92233720368547758083240Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57965892nch1-master-1.nc-master-1.localS-1-5-83-1-2214567916-1128936843-861891987-36248496703/26/2022 8:53:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 83FF9FEC-358B-434A-936D-5F3306D10ED8--2F3C9FB5-33BD-4AF5-8EEA-C3F8EC7FED31 successfully disconnected from port .2340400-92233720368547758083239Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57965892nch1-master-1.nc-master-1.localS-1-5-83-1-2214567916-1128936843-861891987-36248496703/26/2022 8:53:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 9C9C70F7-91CD-4748-8FF3-7B8724AAD565--BBAAFBF2-A7DA-4E15-9F27-6BEABAC9D11A (Friendly Name: 20d1d1b1-7ff8-4820-b9ce-973be1edd28e).2330400-92233720368547758083238Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49803816nch1-master-1.nc-master-1.localS-1-5-83-1-2627498231-1195938253-2273047439-17085015403/26/2022 8:53:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9C9C70F7-91CD-4748-8FF3-7B8724AAD565--BBAAFBF2-A7DA-4E15-9F27-6BEABAC9D11A successfully disconnected from port .2340400-92233720368547758083237Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49803816nch1-master-1.nc-master-1.localS-1-5-83-1-2627498231-1195938253-2273047439-17085015403/26/2022 8:53:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 078D843A-2782-4AB4-9625-97401FA44F8A--1ACBD5CA-E82F-4636-B7D0-28F206A0450F (Friendly Name: ae943f51-447b-434d-a20b-ea825ed34c1a).2330400-92233720368547758083236Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10001052nch1-master-1.nc-master-1.localS-1-5-83-1-126714938-1253320578-1083647382-23204751673/26/2022 8:53:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 078D843A-2782-4AB4-9625-97401FA44F8A--1ACBD5CA-E82F-4636-B7D0-28F206A0450F successfully disconnected from port .2340400-92233720368547758083235Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10001052nch1-master-1.nc-master-1.localS-1-5-83-1-126714938-1253320578-1083647382-23204751673/26/2022 8:53:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 83FF9FEC-358B-434A-936D-5F3306D10ED8--2F3C9FB5-33BD-4AF5-8EEA-C3F8EC7FED31 (Friendly Name: 93403676-99cc-45f4-a873-3df0d3991850) successfully connected to port AE60B85E-07AA-4EF6-A050-C4CC44E43525 (Friendly Name: 93403676-99cc-45f4-a873-3df0d3991850) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083234Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57965820nch1-master-1.nc-master-1.localS-1-5-83-1-2214567916-1128936843-861891987-36248496703/26/2022 8:53:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 83FF9FEC-358B-434A-936D-5F3306D10ED8--2F3C9FB5-33BD-4AF5-8EEA-C3F8EC7FED31 (Friendly Name: ).2330400-92233720368547758083233Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57965820nch1-master-1.nc-master-1.local3/26/2022 8:53:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403232Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:53:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403231Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:53:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CD884D39-3AB4-4C8C-80F6-2DB8CBA3AFC4--A1EFDB92-5923-4E1E-B994-26338B84CE8F (Friendly Name: d6806923-920b-4eab-b4f5-2134464682ab).2330400-92233720368547758083230Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50924356nch1-master-1.nc-master-1.localS-1-5-83-1-3448261945-1284258484-3090019968-32998450673/26/2022 8:53:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CD884D39-3AB4-4C8C-80F6-2DB8CBA3AFC4--A1EFDB92-5923-4E1E-B994-26338B84CE8F successfully disconnected from port .2340400-92233720368547758083229Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50924356nch1-master-1.nc-master-1.localS-1-5-83-1-3448261945-1284258484-3090019968-32998450673/26/2022 8:53:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1BEE50A8-9F6D-4A72-B776-CB4213A1AC76--C50C21A5-2E3C-4932-8B5D-D923FE32BA60 (Friendly Name: f08b295e-9561-4e2a-bfda-0f96cd0ccef5).2330400-92233720368547758083228Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47844740nch1-master-1.nc-master-1.localS-1-5-83-1-468603048-1249025901-1120630455-19910249153/26/2022 8:53:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1BEE50A8-9F6D-4A72-B776-CB4213A1AC76--C50C21A5-2E3C-4932-8B5D-D923FE32BA60 successfully disconnected from port .2340400-92233720368547758083227Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47844740nch1-master-1.nc-master-1.localS-1-5-83-1-468603048-1249025901-1120630455-19910249153/26/2022 8:53:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1BEE50A8-9F6D-4A72-B776-CB4213A1AC76--C50C21A5-2E3C-4932-8B5D-D923FE32BA60 (Friendly Name: f08b295e-9561-4e2a-bfda-0f96cd0ccef5) successfully connected to port 626B2153-08F4-4203-A1FE-CA2A2D230A22 (Friendly Name: f08b295e-9561-4e2a-bfda-0f96cd0ccef5) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083226Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47844780nch1-master-1.nc-master-1.localS-1-5-83-1-468603048-1249025901-1120630455-19910249153/26/2022 8:52:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1BEE50A8-9F6D-4A72-B776-CB4213A1AC76--C50C21A5-2E3C-4932-8B5D-D923FE32BA60 (Friendly Name: ).2330400-92233720368547758083225Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47844780nch1-master-1.nc-master-1.local3/26/2022 8:52:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403224Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:52:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403223Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:52:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 22E1A89C-9671-4F61-A26E-D1FCC7F27859--57C7E395-0676-4F1A-98F2-27CFC1DED03A (Friendly Name: fb15c4ca-1f95-4280-be6b-6b881e010ddd) successfully connected to port EB70D9EF-CAA4-4C6A-BD1F-C48423ACB322 (Friendly Name: fb15c4ca-1f95-4280-be6b-6b881e010ddd) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083222Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40044948nch1-master-1.nc-master-1.localS-1-5-83-1-585214108-1331795569-4241583778-15010986953/26/2022 8:52:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 22E1A89C-9671-4F61-A26E-D1FCC7F27859--57C7E395-0676-4F1A-98F2-27CFC1DED03A (Friendly Name: ).2330400-92233720368547758083221Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40044948nch1-master-1.nc-master-1.local3/26/2022 8:52:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5ADFD239-0CA8-493D-9F36-FF27B51EA82B--80443FA5-B928-401B-AD46-B07EE5562568 (Friendly Name: a8dae999-0d21-4f61-98cc-9514caf565ba).2330400-92233720368547758083220Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26084004nch1-master-1.nc-master-1.localS-1-5-83-1-1524617785-1228737704-671037087-7324381973/26/2022 8:52:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5ADFD239-0CA8-493D-9F36-FF27B51EA82B--80443FA5-B928-401B-AD46-B07EE5562568 successfully disconnected from port .2340400-92233720368547758083219Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26084004nch1-master-1.nc-master-1.localS-1-5-83-1-1524617785-1228737704-671037087-7324381973/26/2022 8:52:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5ADFD239-0CA8-493D-9F36-FF27B51EA82B--80443FA5-B928-401B-AD46-B07EE5562568 (Friendly Name: a8dae999-0d21-4f61-98cc-9514caf565ba) successfully connected to port 79681958-D8C6-4FA2-B265-7A761B8EB115 (Friendly Name: a8dae999-0d21-4f61-98cc-9514caf565ba) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083218Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26084084nch1-master-1.nc-master-1.localS-1-5-83-1-1524617785-1228737704-671037087-7324381973/26/2022 8:52:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5ADFD239-0CA8-493D-9F36-FF27B51EA82B--80443FA5-B928-401B-AD46-B07EE5562568 (Friendly Name: ).2330400-92233720368547758083217Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26084084nch1-master-1.nc-master-1.local3/26/2022 8:52:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D2E6A2E9-C3BF-4314-9D53-B46802713F01--67F2C051-0119-42AE-BB9F-BD8CC84D2177 (Friendly Name: 51ebf85c-7bb5-4aea-b7ff-e1e2bdd59694).2330400-92233720368547758083216Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48883884nch1-master-1.nc-master-1.localS-1-5-83-1-3538330345-1125434303-1756648349-209349143/26/2022 8:52:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D2E6A2E9-C3BF-4314-9D53-B46802713F01--67F2C051-0119-42AE-BB9F-BD8CC84D2177 successfully disconnected from port .2340400-92233720368547758083215Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48883884nch1-master-1.nc-master-1.localS-1-5-83-1-3538330345-1125434303-1756648349-209349143/26/2022 8:52:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D2E6A2E9-C3BF-4314-9D53-B46802713F01--67F2C051-0119-42AE-BB9F-BD8CC84D2177 (Friendly Name: 51ebf85c-7bb5-4aea-b7ff-e1e2bdd59694) successfully connected to port 9A216A0D-18AB-47F8-B386-C97010AA0BBF (Friendly Name: 51ebf85c-7bb5-4aea-b7ff-e1e2bdd59694) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083214Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48883096nch1-master-1.nc-master-1.localS-1-5-83-1-3538330345-1125434303-1756648349-209349143/26/2022 8:52:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D2E6A2E9-C3BF-4314-9D53-B46802713F01--67F2C051-0119-42AE-BB9F-BD8CC84D2177 (Friendly Name: ).2330400-92233720368547758083213Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48883096nch1-master-1.nc-master-1.local3/26/2022 8:52:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic DD88F097-2D2B-43FD-80A1-AF9E378697D8--69022993-5FEE-48F7-B8A7-2CCC2B3197C8 (Friendly Name: 2e11fda9-f504-44f0-83b1-a971192e7903).2330400-92233720368547758083212Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51004776nch1-master-1.nc-master-1.localS-1-5-83-1-3716739223-1140665643-2662310272-36338089513/26/2022 8:52:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DD88F097-2D2B-43FD-80A1-AF9E378697D8--69022993-5FEE-48F7-B8A7-2CCC2B3197C8 successfully disconnected from port .2340400-92233720368547758083211Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51004776nch1-master-1.nc-master-1.localS-1-5-83-1-3716739223-1140665643-2662310272-36338089513/26/2022 8:52:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DD88F097-2D2B-43FD-80A1-AF9E378697D8--69022993-5FEE-48F7-B8A7-2CCC2B3197C8 (Friendly Name: 2e11fda9-f504-44f0-83b1-a971192e7903) successfully connected to port C845AEA2-20B2-43AE-9943-D6783C1B90B6 (Friendly Name: 2e11fda9-f504-44f0-83b1-a971192e7903) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083210Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51002964nch1-master-1.nc-master-1.localS-1-5-83-1-3716739223-1140665643-2662310272-36338089513/26/2022 8:52:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic DD88F097-2D2B-43FD-80A1-AF9E378697D8--69022993-5FEE-48F7-B8A7-2CCC2B3197C8 (Friendly Name: ).2330400-92233720368547758083209Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51002964nch1-master-1.nc-master-1.local3/26/2022 8:52:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118403208Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:52:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118403207Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:52:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-A0-DB-35 has moved from port 80F5929B-A337-470B-A006-81636133FF2A (Friendly Name: d20c4d66-5919-4014-97bf-e9934b31149c) to port 80F5929B-A337-470B-A006-81636133FF2A (Friendly Name: d20c4d66-5919-4014-97bf-e9934b31149c).250410180-92233720368547758083206Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24684832nch1-master-1.nc-master-1.local3/26/2022 8:52:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CFA21115-CEBD-48F5-9791-94E244BB4160--DB969153-186F-47EC-A40E-00DE6C282A97 (Friendly Name: d20c4d66-5919-4014-97bf-e9934b31149c) successfully connected to port 80F5929B-A337-470B-A006-81636133FF2A (Friendly Name: d20c4d66-5919-4014-97bf-e9934b31149c) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083205Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48244768nch1-master-1.nc-master-1.localS-1-5-83-1-3483504917-1224068797-3801387415-16149205163/26/2022 8:52:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D39F6729-F020-4EEE-883E-9BF7E354075B--1B9B3FBE-D98F-456F-9E15-9E4D05F4C3FA (Friendly Name: 6fa41142-bff0-4477-bc27-c57a3d2eb5fd) successfully connected to port F0FEBCF1-3F0F-40C4-964F-06B6E3D100EB (Friendly Name: 6fa41142-bff0-4477-bc27-c57a3d2eb5fd) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083204Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2688592nch1-master-1.nc-master-1.localS-1-5-83-1-3550439209-1324281888-4154146440-15272071393/26/2022 8:52:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D39F6729-F020-4EEE-883E-9BF7E354075B--1B9B3FBE-D98F-456F-9E15-9E4D05F4C3FA (Friendly Name: ).2330400-92233720368547758083203Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2688592nch1-master-1.nc-master-1.local3/26/2022 8:52:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CFA21115-CEBD-48F5-9791-94E244BB4160--DB969153-186F-47EC-A40E-00DE6C282A97 (Friendly Name: ).2330400-92233720368547758083202Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48244768nch1-master-1.nc-master-1.local3/26/2022 8:52:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F0F2CDE0-6CDE-4211-B027-31B680C0FE26--B31D6495-B948-4567-A46D-977C1BE1CC42 (Friendly Name: 51ebf85c-7bb5-4aea-b7ff-e1e2bdd59694).2330400-92233720368547758083201Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41603724nch1-master-1.nc-master-1.localS-1-5-83-1-4042444256-1108438238-3056674736-6542296323/26/2022 8:52:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F0F2CDE0-6CDE-4211-B027-31B680C0FE26--B31D6495-B948-4567-A46D-977C1BE1CC42 successfully disconnected from port .2340400-92233720368547758083200Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41603724nch1-master-1.nc-master-1.localS-1-5-83-1-4042444256-1108438238-3056674736-6542296323/26/2022 8:52:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0194626F-FAD6-46F2-800A-4E129AAFE0E1--E080FA92-F67B-4273-B73F-C3C640404711 (Friendly Name: d20c4d66-5919-4014-97bf-e9934b31149c).2330400-92233720368547758083199Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42084592nch1-master-1.nc-master-1.localS-1-5-83-1-26501743-1190329046-307104384-37895986183/26/2022 8:52:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0194626F-FAD6-46F2-800A-4E129AAFE0E1--E080FA92-F67B-4273-B73F-C3C640404711 successfully disconnected from port .2340400-92233720368547758083198Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42084592nch1-master-1.nc-master-1.localS-1-5-83-1-26501743-1190329046-307104384-37895986183/26/2022 8:52:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-A0-DB-35 has moved from port 8079011F-FD87-440E-99E5-6FBE08BE81F5 (Friendly Name: d20c4d66-5919-4014-97bf-e9934b31149c) to port 8079011F-FD87-440E-99E5-6FBE08BE81F5 (Friendly Name: d20c4d66-5919-4014-97bf-e9934b31149c).250410180-92233720368547758083197Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24684816nch1-master-1.nc-master-1.local3/26/2022 8:52:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0194626F-FAD6-46F2-800A-4E129AAFE0E1--E080FA92-F67B-4273-B73F-C3C640404711 (Friendly Name: d20c4d66-5919-4014-97bf-e9934b31149c) successfully connected to port 8079011F-FD87-440E-99E5-6FBE08BE81F5 (Friendly Name: d20c4d66-5919-4014-97bf-e9934b31149c) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083196Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42084592nch1-master-1.nc-master-1.localS-1-5-83-1-26501743-1190329046-307104384-37895986183/26/2022 8:52:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0194626F-FAD6-46F2-800A-4E129AAFE0E1--E080FA92-F67B-4273-B73F-C3C640404711 (Friendly Name: ).2330400-92233720368547758083195Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42084592nch1-master-1.nc-master-1.local3/26/2022 8:52:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic FC5D5995-6CE8-4AEA-9F38-C14F83E852E8--6E49F4DA-D412-4B92-AE99-F1D82B8DDD5D (Friendly Name: d20c4d66-5919-4014-97bf-e9934b31149c).2330400-92233720368547758083194Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12965096nch1-master-1.nc-master-1.localS-1-5-83-1-4233976213-1256877288-1338063007-38977475873/26/2022 8:52:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FC5D5995-6CE8-4AEA-9F38-C14F83E852E8--6E49F4DA-D412-4B92-AE99-F1D82B8DDD5D successfully disconnected from port .2340400-92233720368547758083193Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12965096nch1-master-1.nc-master-1.localS-1-5-83-1-4233976213-1256877288-1338063007-38977475873/26/2022 8:52:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 46A8A308-DC97-41B6-B7F0-8DABAEAC346E--917D8C9F-B533-4421-9E3A-FF86966C5837 (Friendly Name: eb28e42c-172b-407b-901a-05cc677135e3).2330400-92233720368547758083192Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33164824nch1-master-1.nc-master-1.localS-1-5-83-1-1185456904-1102503063-2878206135-18489458383/26/2022 8:51:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 46A8A308-DC97-41B6-B7F0-8DABAEAC346E--917D8C9F-B533-4421-9E3A-FF86966C5837 successfully disconnected from port .2340400-92233720368547758083191Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33164824nch1-master-1.nc-master-1.localS-1-5-83-1-1185456904-1102503063-2878206135-18489458383/26/2022 8:51:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-62-D6-33 has moved from port F333C198-171B-4677-9013-47F16A8E8264 (Friendly Name: br-data_External) to port 79CDEB10-87FD-4076-86AE-78FEA836489C (Friendly Name: c7df1940-2f47-4d41-b48f-8078b14b9cc2).250410180-92233720368547758083190Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50922812nch1-master-1.nc-master-1.local3/26/2022 8:51:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D5B4CF59-9EFC-4E75-8179-7300FE6CCE5C--0D130F13-5771-4FE0-ADBD-145CC41CCD93 (Friendly Name: c7df1940-2f47-4d41-b48f-8078b14b9cc2) successfully connected to port 79CDEB10-87FD-4076-86AE-78FEA836489C (Friendly Name: c7df1940-2f47-4d41-b48f-8078b14b9cc2) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083189Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2504844nch1-master-1.nc-master-1.localS-1-5-83-1-3585396569-1316331260-7567745-15570321903/26/2022 8:51:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D5B4CF59-9EFC-4E75-8179-7300FE6CCE5C--0D130F13-5771-4FE0-ADBD-145CC41CCD93 (Friendly Name: ).2330400-92233720368547758083188Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2504844nch1-master-1.nc-master-1.local3/26/2022 8:51:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F0F2CDE0-6CDE-4211-B027-31B680C0FE26--B31D6495-B948-4567-A46D-977C1BE1CC42 (Friendly Name: 51ebf85c-7bb5-4aea-b7ff-e1e2bdd59694) successfully connected to port 0F719E3F-35C7-4206-9515-6A40422E5051 (Friendly Name: 51ebf85c-7bb5-4aea-b7ff-e1e2bdd59694) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083187Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41603724nch1-master-1.nc-master-1.localS-1-5-83-1-4042444256-1108438238-3056674736-6542296323/26/2022 8:51:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F0F2CDE0-6CDE-4211-B027-31B680C0FE26--B31D6495-B948-4567-A46D-977C1BE1CC42 (Friendly Name: ).2330400-92233720368547758083186Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41603724nch1-master-1.nc-master-1.local3/26/2022 8:51:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 550A3A91-D08D-4021-972F-6C3A49BAD2A1--339198F7-6644-4F61-920B-EF0D91C6A7E8 (Friendly Name: be7b6f80-22ba-471b-968f-ba95ce014ba3).2330400-92233720368547758083185Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28325016nch1-master-1.nc-master-1.localS-1-5-83-1-1426733713-1075957901-980168599-27149420253/26/2022 8:51:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 550A3A91-D08D-4021-972F-6C3A49BAD2A1--339198F7-6644-4F61-920B-EF0D91C6A7E8 successfully disconnected from port .2340400-92233720368547758083184Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28325016nch1-master-1.nc-master-1.localS-1-5-83-1-1426733713-1075957901-980168599-27149420253/26/2022 8:51:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403183Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:51:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403182Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:51:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403181Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.local3/26/2022 8:51:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CD884D39-3AB4-4C8C-80F6-2DB8CBA3AFC4--A1EFDB92-5923-4E1E-B994-26338B84CE8F (Friendly Name: d6806923-920b-4eab-b4f5-2134464682ab) successfully connected to port 0CE483FD-0570-4F57-BEC0-CB2FD6B2436C (Friendly Name: d6806923-920b-4eab-b4f5-2134464682ab) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083180Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50924356nch1-master-1.nc-master-1.localS-1-5-83-1-3448261945-1284258484-3090019968-32998450673/26/2022 8:51:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CD884D39-3AB4-4C8C-80F6-2DB8CBA3AFC4--A1EFDB92-5923-4E1E-B994-26338B84CE8F (Friendly Name: ).2330400-92233720368547758083179Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50924356nch1-master-1.nc-master-1.local3/26/2022 8:51:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FC5D5995-6CE8-4AEA-9F38-C14F83E852E8--6E49F4DA-D412-4B92-AE99-F1D82B8DDD5D (Friendly Name: d20c4d66-5919-4014-97bf-e9934b31149c) successfully connected to port DF52016F-218B-4C2E-8431-D98899376297 (Friendly Name: d20c4d66-5919-4014-97bf-e9934b31149c) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083178Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12961168nch1-master-1.nc-master-1.localS-1-5-83-1-4233976213-1256877288-1338063007-38977475873/26/2022 8:51:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic FC5D5995-6CE8-4AEA-9F38-C14F83E852E8--6E49F4DA-D412-4B92-AE99-F1D82B8DDD5D (Friendly Name: ).2330400-92233720368547758083177Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12961168nch1-master-1.nc-master-1.local3/26/2022 8:51:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403176Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804916nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:51:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403175Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804916nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:51:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 550A3A91-D08D-4021-972F-6C3A49BAD2A1--339198F7-6644-4F61-920B-EF0D91C6A7E8 (Friendly Name: be7b6f80-22ba-471b-968f-ba95ce014ba3) successfully connected to port 59B507B2-5F79-4847-83DA-8111462CBDA3 (Friendly Name: be7b6f80-22ba-471b-968f-ba95ce014ba3) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083174Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28325016nch1-master-1.nc-master-1.localS-1-5-83-1-1426733713-1075957901-980168599-27149420253/26/2022 8:51:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 550A3A91-D08D-4021-972F-6C3A49BAD2A1--339198F7-6644-4F61-920B-EF0D91C6A7E8 (Friendly Name: ).2330400-92233720368547758083173Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28325016nch1-master-1.nc-master-1.local3/26/2022 8:51:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-FD-4D-ED has moved from port 5686171B-DFB2-4389-A54A-11D0E73974C8 (Friendly Name: 45b38ca2-4fe0-430a-bebd-437115db1ae6) to port 5686171B-DFB2-4389-A54A-11D0E73974C8 (Friendly Name: 45b38ca2-4fe0-430a-bebd-437115db1ae6).250410180-92233720368547758083172Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24683804nch1-master-1.nc-master-1.local3/26/2022 8:51:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FC64C5F8-9BE3-409C-9A54-C673BC6B7CAC--0ED740E1-45C2-4C08-A191-C51D0F10F4DD (Friendly Name: 45b38ca2-4fe0-430a-bebd-437115db1ae6) successfully connected to port 5686171B-DFB2-4389-A54A-11D0E73974C8 (Friendly Name: 45b38ca2-4fe0-430a-bebd-437115db1ae6) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083171Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37604864nch1-master-1.nc-master-1.localS-1-5-83-1-4234462712-1084005347-1942377626-28938351963/26/2022 8:51:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic FA944897-4628-4F3D-ADBB-155BD8C89F9B--362A6243-C18F-44FB-96F4-CBB5D877E254 (Friendly Name: 7f9dbd4b-d061-4ca4-82e6-42454e573a0d).2330400-92233720368547758083170Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12643212nch1-master-1.nc-master-1.localS-1-5-83-1-4204021911-1329415720-1528150957-26109401203/26/2022 8:51:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FA944897-4628-4F3D-ADBB-155BD8C89F9B--362A6243-C18F-44FB-96F4-CBB5D877E254 successfully disconnected from port .2340400-92233720368547758083169Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12643212nch1-master-1.nc-master-1.localS-1-5-83-1-4204021911-1329415720-1528150957-26109401203/26/2022 8:51:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic FC64C5F8-9BE3-409C-9A54-C673BC6B7CAC--0ED740E1-45C2-4C08-A191-C51D0F10F4DD (Friendly Name: ).2330400-92233720368547758083168Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37604844nch1-master-1.nc-master-1.local3/26/2022 8:51:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the running state.7036016384400-91873432398358118403167Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804916nch1-master-1.nc-master-1.local3/26/2022 8:51:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E36A027C-EAE2-404E-A1BD-9755CF9FACE4--507D9A4A-6C2D-402E-87F9-9D08AF77CEF3 (Friendly Name: 45b38ca2-4fe0-430a-bebd-437115db1ae6).2330400-92233720368547758083166Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2540752nch1-master-1.nc-master-1.localS-1-5-83-1-3815375484-1078913762-1436007841-38365183513/26/2022 8:51:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E36A027C-EAE2-404E-A1BD-9755CF9FACE4--507D9A4A-6C2D-402E-87F9-9D08AF77CEF3 successfully disconnected from port .2340400-92233720368547758083165Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2540752nch1-master-1.nc-master-1.localS-1-5-83-1-3815375484-1078913762-1436007841-38365183513/26/2022 8:51:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 46A8A308-DC97-41B6-B7F0-8DABAEAC346E--917D8C9F-B533-4421-9E3A-FF86966C5837 (Friendly Name: eb28e42c-172b-407b-901a-05cc677135e3) successfully connected to port 623CC113-7857-45C7-A8D3-AF78F73B385E (Friendly Name: eb28e42c-172b-407b-901a-05cc677135e3) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083164Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33162896nch1-master-1.nc-master-1.localS-1-5-83-1-1185456904-1102503063-2878206135-18489458383/26/2022 8:51:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 46A8A308-DC97-41B6-B7F0-8DABAEAC346E--917D8C9F-B533-4421-9E3A-FF86966C5837 (Friendly Name: ).2330400-92233720368547758083163Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33162896nch1-master-1.nc-master-1.local3/26/2022 8:51:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403162Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804916nch1-master-1.nc-master-1.local3/26/2022 8:51:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403161Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804868nch1-master-1.nc-master-1.local3/26/2022 8:51:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FA944897-4628-4F3D-ADBB-155BD8C89F9B--362A6243-C18F-44FB-96F4-CBB5D877E254 (Friendly Name: 7f9dbd4b-d061-4ca4-82e6-42454e573a0d) successfully connected to port 398CDCDC-11EB-45AA-B0DE-D789238F2D84 (Friendly Name: 7f9dbd4b-d061-4ca4-82e6-42454e573a0d) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083160Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12644168nch1-master-1.nc-master-1.localS-1-5-83-1-4204021911-1329415720-1528150957-26109401203/26/2022 8:50:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic FA944897-4628-4F3D-ADBB-155BD8C89F9B--362A6243-C18F-44FB-96F4-CBB5D877E254 (Friendly Name: ).2330400-92233720368547758083159Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12644168nch1-master-1.nc-master-1.local3/26/2022 8:50:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EB6B80AE-9910-4AB1-8D17-B5D1DA188813--DBDEF2D6-665A-4C2D-AB2B-79A351ED2207 (Friendly Name: 3a424d5c-848e-4f7a-ae8b-4bdcbb58ad54).2330400-92233720368547758083158Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1524876nch1-master-1.nc-master-1.localS-1-5-83-1-3949691054-1253153040-3518306189-3276863623/26/2022 8:50:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EB6B80AE-9910-4AB1-8D17-B5D1DA188813--DBDEF2D6-665A-4C2D-AB2B-79A351ED2207 successfully disconnected from port .2340400-92233720368547758083157Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1524876nch1-master-1.nc-master-1.localS-1-5-83-1-3949691054-1253153040-3518306189-3276863623/26/2022 8:50:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 078D843A-2782-4AB4-9625-97401FA44F8A--1ACBD5CA-E82F-4636-B7D0-28F206A0450F (Friendly Name: ae943f51-447b-434d-a20b-ea825ed34c1a) successfully connected to port 0D219C44-7161-4EF9-94B4-693EC80E1660 (Friendly Name: ae943f51-447b-434d-a20b-ea825ed34c1a) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083156Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10001048nch1-master-1.nc-master-1.localS-1-5-83-1-126714938-1253320578-1083647382-23204751673/26/2022 8:50:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 078D843A-2782-4AB4-9625-97401FA44F8A--1ACBD5CA-E82F-4636-B7D0-28F206A0450F (Friendly Name: ).2330400-92233720368547758083155Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10001048nch1-master-1.nc-master-1.local3/26/2022 8:50:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403154Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804868nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:50:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403153Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804868nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:50:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E36A027C-EAE2-404E-A1BD-9755CF9FACE4--507D9A4A-6C2D-402E-87F9-9D08AF77CEF3 (Friendly Name: 45b38ca2-4fe0-430a-bebd-437115db1ae6) successfully connected to port D3EA49D2-7E7F-45DE-ADA6-123D08DA7EF4 (Friendly Name: 45b38ca2-4fe0-430a-bebd-437115db1ae6) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083152Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25401876nch1-master-1.nc-master-1.localS-1-5-83-1-3815375484-1078913762-1436007841-38365183513/26/2022 8:50:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E36A027C-EAE2-404E-A1BD-9755CF9FACE4--507D9A4A-6C2D-402E-87F9-9D08AF77CEF3 (Friendly Name: ).2330400-92233720368547758083151Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25401876nch1-master-1.nc-master-1.local3/26/2022 8:50:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EB6B80AE-9910-4AB1-8D17-B5D1DA188813--DBDEF2D6-665A-4C2D-AB2B-79A351ED2207 (Friendly Name: 3a424d5c-848e-4f7a-ae8b-4bdcbb58ad54) successfully connected to port 420076DF-BB5A-4F1F-B580-168EC4D3BD67 (Friendly Name: 3a424d5c-848e-4f7a-ae8b-4bdcbb58ad54) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083150Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem15242964nch1-master-1.nc-master-1.localS-1-5-83-1-3949691054-1253153040-3518306189-3276863623/26/2022 8:50:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EB6B80AE-9910-4AB1-8D17-B5D1DA188813--DBDEF2D6-665A-4C2D-AB2B-79A351ED2207 (Friendly Name: ).2330400-92233720368547758083149Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem15242964nch1-master-1.nc-master-1.local3/26/2022 8:50:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403148Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:50:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 517F7E73-2681-4C0D-BF3F-7E0A4905BABA--A7DD66D9-CDF4-449F-8DD4-DA215B0B2A61 (Friendly Name: d936e69d-c8c8-4caa-b90c-1a76ded54906).2330400-92233720368547758083147Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50643780nch1-master-1.nc-master-1.localS-1-5-83-1-1367309939-1275930241-176046015-31327532253/26/2022 8:50:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 517F7E73-2681-4C0D-BF3F-7E0A4905BABA--A7DD66D9-CDF4-449F-8DD4-DA215B0B2A61 successfully disconnected from port .2340400-92233720368547758083146Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50643780nch1-master-1.nc-master-1.localS-1-5-83-1-1367309939-1275930241-176046015-31327532253/26/2022 8:50:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 517F7E73-2681-4C0D-BF3F-7E0A4905BABA--A7DD66D9-CDF4-449F-8DD4-DA215B0B2A61 (Friendly Name: d936e69d-c8c8-4caa-b90c-1a76ded54906) successfully connected to port 32AF2012-6C20-4A32-B5EF-A61B4968E7BC (Friendly Name: d936e69d-c8c8-4caa-b90c-1a76ded54906) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083145Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50644824nch1-master-1.nc-master-1.localS-1-5-83-1-1367309939-1275930241-176046015-31327532253/26/2022 8:50:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 517F7E73-2681-4C0D-BF3F-7E0A4905BABA--A7DD66D9-CDF4-449F-8DD4-DA215B0B2A61 (Friendly Name: ).2330400-92233720368547758083144Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50644824nch1-master-1.nc-master-1.local3/26/2022 8:50:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B5BBA93B-4DCA-4D2E-8C47-B265A0FCDD7A--4A059EF1-44F1-4B52-8BD6-0A7C18D1B9BC (Friendly Name: 29aa9240-7fae-4127-aa8a-eca7df73d597).2330400-92233720368547758083143Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38483024nch1-master-1.nc-master-1.localS-1-5-83-1-3048974651-1294880202-1706182540-20613684803/26/2022 8:50:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B5BBA93B-4DCA-4D2E-8C47-B265A0FCDD7A--4A059EF1-44F1-4B52-8BD6-0A7C18D1B9BC successfully disconnected from port .2340400-92233720368547758083142Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38483024nch1-master-1.nc-master-1.localS-1-5-83-1-3048974651-1294880202-1706182540-20613684803/26/2022 8:50:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403141Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:50:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403140Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:50:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9C9C70F7-91CD-4748-8FF3-7B8724AAD565--BBAAFBF2-A7DA-4E15-9F27-6BEABAC9D11A (Friendly Name: 20d1d1b1-7ff8-4820-b9ce-973be1edd28e) successfully connected to port B4DBE3C1-8DA8-4964-B1EB-BBD81C74A025 (Friendly Name: 20d1d1b1-7ff8-4820-b9ce-973be1edd28e) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083139Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49804540nch1-master-1.nc-master-1.localS-1-5-83-1-2627498231-1195938253-2273047439-17085015403/26/2022 8:50:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 9C9C70F7-91CD-4748-8FF3-7B8724AAD565--BBAAFBF2-A7DA-4E15-9F27-6BEABAC9D11A (Friendly Name: ).2330400-92233720368547758083138Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49804540nch1-master-1.nc-master-1.local3/26/2022 8:50:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 509A4D89-D68F-432C-996C-62156D729845--85B20C94-0509-43DB-9A05-69217BA92A23 (Friendly Name: d86480f4-ccb4-4512-910f-b238b3c84889).2330400-92233720368547758083137Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47644616nch1-master-1.nc-master-1.localS-1-5-83-1-1352289673-1127011983-358771865-11676186693/26/2022 8:50:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 509A4D89-D68F-432C-996C-62156D729845--85B20C94-0509-43DB-9A05-69217BA92A23 successfully disconnected from port .2340400-92233720368547758083136Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47644616nch1-master-1.nc-master-1.localS-1-5-83-1-1352289673-1127011983-358771865-11676186693/26/2022 8:50:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 74EC85CC-041D-4747-B876-A40813D38ADA--DBA9C0B8-7CEC-4978-BA94-0963F5560310 (Friendly Name: c66c8bf4-d08f-4509-bf2b-45e319b3aa79).2330400-92233720368547758083135Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23322340nch1-master-1.nc-master-1.localS-1-5-83-1-1961657804-1195836445-144996024-36665310913/26/2022 8:50:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 74EC85CC-041D-4747-B876-A40813D38ADA--DBA9C0B8-7CEC-4978-BA94-0963F5560310 successfully disconnected from port .2340400-92233720368547758083134Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23322340nch1-master-1.nc-master-1.localS-1-5-83-1-1961657804-1195836445-144996024-36665310913/26/2022 8:50:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Status 0x00001069 determining that device interface \\?\{8e7bd593-6e6c-4c52-86a6-77175494dd8e}#MsVhdHba#1&3030e83&0&01#{2accfe60-c130-11d2-b082-00a0c91efb8b} does not support iSCSI WMI interfaces. If this device is not an iSCSI HBA then this error can be ignored. 108030360287970189639683133MSiSCSISystemnch1-master-1.nc-master-1.local3/26/2022 8:49:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 74EC85CC-041D-4747-B876-A40813D38ADA--DBA9C0B8-7CEC-4978-BA94-0963F5560310 (Friendly Name: c66c8bf4-d08f-4509-bf2b-45e319b3aa79) successfully connected to port 3718326B-C448-45C2-A87C-9DBE28D7B25F (Friendly Name: c66c8bf4-d08f-4509-bf2b-45e319b3aa79) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083132Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23322512nch1-master-1.nc-master-1.localS-1-5-83-1-1961657804-1195836445-144996024-36665310913/26/2022 8:49:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 74EC85CC-041D-4747-B876-A40813D38ADA--DBA9C0B8-7CEC-4978-BA94-0963F5560310 (Friendly Name: ).2330400-92233720368547758083131Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23322512nch1-master-1.nc-master-1.local3/26/2022 8:49:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B5BBA93B-4DCA-4D2E-8C47-B265A0FCDD7A--4A059EF1-44F1-4B52-8BD6-0A7C18D1B9BC (Friendly Name: 29aa9240-7fae-4127-aa8a-eca7df73d597) successfully connected to port CC9177D6-C5F6-4A57-9DB0-2ACBD1EA0BCC (Friendly Name: 29aa9240-7fae-4127-aa8a-eca7df73d597) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083130Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38483024nch1-master-1.nc-master-1.localS-1-5-83-1-3048974651-1294880202-1706182540-20613684803/26/2022 8:49:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B5BBA93B-4DCA-4D2E-8C47-B265A0FCDD7A--4A059EF1-44F1-4B52-8BD6-0A7C18D1B9BC (Friendly Name: ).2330400-92233720368547758083129Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38483024nch1-master-1.nc-master-1.local3/26/2022 8:49:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 509A4D89-D68F-432C-996C-62156D729845--85B20C94-0509-43DB-9A05-69217BA92A23 (Friendly Name: d86480f4-ccb4-4512-910f-b238b3c84889) successfully connected to port 7D8F0BDB-2104-4389-9426-F8C7D4A3567F (Friendly Name: d86480f4-ccb4-4512-910f-b238b3c84889) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083128Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47644616nch1-master-1.nc-master-1.localS-1-5-83-1-1352289673-1127011983-358771865-11676186693/26/2022 8:49:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 509A4D89-D68F-432C-996C-62156D729845--85B20C94-0509-43DB-9A05-69217BA92A23 (Friendly Name: ).2330400-92233720368547758083127Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47644616nch1-master-1.nc-master-1.local3/26/2022 8:49:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic DF0D0956-3341-4F33-BA91-EFAA20B569F9--6552F04B-D912-4FD4-A6B8-3965B33990EB (Friendly Name: 13fd6291-82e1-4682-be21-fc0e69cbb0c3).2330400-92233720368547758083126Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5096828nch1-master-1.nc-master-1.localS-1-5-83-1-3742173526-1328755521-2867827130-41844544323/26/2022 8:49:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DF0D0956-3341-4F33-BA91-EFAA20B569F9--6552F04B-D912-4FD4-A6B8-3965B33990EB successfully disconnected from port .2340400-92233720368547758083125Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5096828nch1-master-1.nc-master-1.localS-1-5-83-1-3742173526-1328755521-2867827130-41844544323/26/2022 8:49:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DF0D0956-3341-4F33-BA91-EFAA20B569F9--6552F04B-D912-4FD4-A6B8-3965B33990EB (Friendly Name: 13fd6291-82e1-4682-be21-fc0e69cbb0c3) successfully connected to port DB27CE23-7E81-42FD-87C7-D45F942EE89F (Friendly Name: 13fd6291-82e1-4682-be21-fc0e69cbb0c3) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758083124Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50963204nch1-master-1.nc-master-1.localS-1-5-83-1-3742173526-1328755521-2867827130-41844544323/26/2022 8:49:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic DF0D0956-3341-4F33-BA91-EFAA20B569F9--6552F04B-D912-4FD4-A6B8-3965B33990EB (Friendly Name: ).2330400-92233720368547758083123Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50963204nch1-master-1.nc-master-1.local3/26/2022 8:49:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403122Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:49:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403121Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:49:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403120Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804868nch1-master-1.nc-master-1.local3/26/2022 8:49:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Biometric Service service entered the stopped state.7036016384400-91873432398358118403119Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:48:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403118Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:48:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the stopped state.7036016384400-91873432398358118403117Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:48:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403116Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:48:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403115Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:48:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Downloaded Maps Manager service entered the stopped state.7036016384400-91873432398358118403114Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:47:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the running state.7036016384400-91873432398358118403113Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:47:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403112Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:47:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the running state.7036016384400-91873432398358118403111Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:47:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118403110Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:47:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Downloaded Maps Manager service entered the running state.7036016384400-91873432398358118403109Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:47:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the running state.7036016384400-91873432398358118403108Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:47:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the running state.7036016384400-91873432398358118403107Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:47:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The neutron-hyperv-agent service entered the running state.7036016384400-91873432398358118403106Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:46:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NC-MASTER-1\administrator SID (S-1-5-21-256150158-1070145159-3929884245-500) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403105Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem980620nch1-master-1.nc-master-1.localS-1-5-21-256150158-1070145159-3929884245-5003/26/2022 8:46:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the neutron-hyperv-agent service was changed from demand start to auto start.7040016384400-91873432398358118403104Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.localS-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:46:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nova-compute service entered the running state.7036016384400-91873432398358118403103Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:46:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NC-MASTER-1\administrator SID (S-1-5-21-256150158-1070145159-3929884245-500) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403102Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem980620nch1-master-1.nc-master-1.localS-1-5-21-256150158-1070145159-3929884245-5003/26/2022 8:46:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nova-compute service was changed from demand start to auto start.7040016384400-91873432398358118403101Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.localS-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:46:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403100Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804868nch1-master-1.nc-master-1.local3/26/2022 8:46:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083099Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14683324nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:46:16 PMcf591af5-0124-4189-9346-8ae08d3f7146systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the stopped state.7036016384400-91873432398358118403098Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804868nch1-master-1.nc-master-1.local3/26/2022 8:46:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403097Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041252nch1-master-1.nc-master-1.local3/26/2022 8:46:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083096Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14683324nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:46:06 PM3f1ee29e-0daa-49a9-91de-b1a52cb4c893systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source VM IC Time Synchronization Provider.350400-92233720368547758083095Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem10321928nch1-master-1.nc-master-1.localS-1-5-193/26/2022 8:45:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the stopped state.7036016384400-91873432398358118403094Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the stopped state.7036016384400-91873432398358118403093Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.local3/26/2022 8:45:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639683092Virtual Disk ServiceSystemnch1-master-1.nc-master-1.local3/26/2022 8:45:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the running state.7036016384400-91873432398358118403091Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.local3/26/2022 8:45:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639683090Virtual Disk ServiceSystemnch1-master-1.nc-master-1.local3/26/2022 8:45:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403089Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9802992nch1-master-1.nc-master-1.localS-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:45:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from ncad-master-1.nc-master-1.local (ntp.d|0.0.0.0:123->10.222.0.32:123).370400-92233720368547758083088Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem10321928nch1-master-1.nc-master-1.localS-1-5-193/26/2022 8:45:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118403087Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.local3/26/2022 8:45:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\cloudbase-init SID (S-1-5-21-1417426523-634556122-2994118469-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403086Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801012nch1-master-1.nc-master-1.localS-1-5-21-1417426523-634556122-2994118469-10003/26/2022 8:45:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system failed to register pointer (PTR) resource records (RRs) for network adapter with settings: Adapter Name : {15447F43-FC32-4E53-AF17-5C0562E0F60D} Host Name : nch1-master-1 Adapter-specific Domain Suffix : nc-master-1.local DNS server list : 10.222.0.32, 8.8.8.8, 4.4.4.4 Sent update to server : <?> IP Address : 10.222.0.21 The reason the system could not register these RRs during the update request was because of a system problem. You can manually retry DNS registration of the network adapter and its settings by typing 'ipconfig /registerdns' at the command prompt. If problems still persist, contact your DNS server or network systems administrator. See event details for specific error code information.8014041028046116860184273879043085Microsoft-Windows-DNS-Client1c95126e-7eea-49a9-a3fe-a378b03ddb4dSystem11523100nch1-master-1.nc-master-1.localS-1-5-203/26/2022 8:45:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403084Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083083Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14683324nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:33 PM9f954286-1bf7-4eb7-a43c-784aab46d461systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The firewall exception to allow Internet Storage Name Server (iSNS) client functionality is not enabled. iSNS client functionality is not available.121030360287970189639683082MSiSCSISystemnch1-master-1.nc-master-1.local3/26/2022 8:45:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The swprv service entered the running state.7036016384400-91873432398358118403081Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041252nch1-master-1.nc-master-1.local3/26/2022 8:45:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wuauserv service entered the running state.7036016384400-91873432398358118403080Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041252nch1-master-1.nc-master-1.local3/26/2022 8:45:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmcompute service entered the running state.7036016384400-91873432398358118403079Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041252nch1-master-1.nc-master-1.local3/26/2022 8:45:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403078Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041252nch1-master-1.nc-master-1.local3/26/2022 8:45:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083077Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14682800nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:31 PM34b2cf9a-6a31-4def-b37f-932a657aaf86systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wlidsvc service entered the running state.7036016384400-91873432398358118403076Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804868nch1-master-1.nc-master-1.local3/26/2022 8:45:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MSiSCSI service entered the running state.7036016384400-91873432398358118403075Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804868nch1-master-1.nc-master-1.local3/26/2022 8:45:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the stopped state.7036016384400-91873432398358118403074Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041252nch1-master-1.nc-master-1.local3/26/2022 8:45:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the running state.7036016384400-91873432398358118403073Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041252nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118403072Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804808nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981443071Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4184nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\cloudbase-init SID (S-1-5-21-1417426523-634556122-2994118469-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403070Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9802984nch1-master-1.nc-master-1.localS-1-5-21-1417426523-634556122-2994118469-10003/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118403069Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981443068Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4508nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:10.222.0.21 has been brought up.42000400-92233720368547758083067Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System14682196nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118403066Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118403065Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118403064Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The KeyIso service entered the running state.7036016384400-91873432398358118403063Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118403062Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118403061Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118403060Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118403059Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118403058Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118403057Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403056Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A new self signed certificate to be used for RD Session Host Server authentication on SSL connections was generated. The name on this certificate is nch1-master-1.nc-master-1.local. The SHA1 hash of the certificate is in the event data.1056049152400360287970189639683055Microsoft-Windows-TerminalServices-RemoteConnectionManagerc76baa63-ae81-421c-b425-340b4b24157fSystem00nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639683054Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00nch1-master-1.nc-master-1.local3/26/2022 8:45:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118403053Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118403052Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118403051Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ceph-rbd service entered the running state.7036016384400-91873432398358118403050Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118403049Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SessionEnv service entered the running state.7036016384400-91873432398358118403048Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118403047Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118403046Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041088nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118403045Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118403044Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041244nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118403043Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804916nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118403042Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the running state.7036016384400-91873432398358118403041Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKEEXT service entered the running state.7036016384400-91873432398358118403040Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118403039Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Netlogon service entered the running state.7036016384400-91873432398358118403038Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CertPropSvc service entered the running state.7036016384400-91873432398358118403037Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118403036Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118403035Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118403034Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118403033Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UmRdpService service entered the running state.7036016384400-91873432398358118403032Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118403031Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PolicyAgent service entered the running state.7036016384400-91873432398358118403030Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118403029Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118403028Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118403027Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118403026Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is now operational.230410160-92233720368547758083025Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4184nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758083024Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4184nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758083023Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4184nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcbService service entered the running state.7036016384400-91873432398358118403022Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041244nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118403021Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the running state.7036016384400-91873432398358118403020Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118403019Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118403018Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118403017Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804908nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118403016Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118403015Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118403014Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118403013Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118403012Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804552nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118403011Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118403010Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981443009Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem432nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118403008Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2022?-?03?-?26T20:45:27.434000000Z from ?2022?-?03?-?26T20:45:27.194971900Z. Change Reason: An application or system component changed the time.11450-92233720368547757923007Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10281392nch1-master-1.nc-master-1.localS-1-5-193/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118403006Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118403005Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041256nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981443004Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem432nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118403003Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118403002Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041252nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981443001Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem432nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118403000Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402999Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402998Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284nch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522997Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System10281248nch1-master-1.nc-master-1.localS-1-5-193/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522996Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem10281148nch1-master-1.nc-master-1.localS-1-5-193/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402995Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912nch1-master-1.nc-master-1.local3/26/2022 8:45:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TermService service entered the running state.7036016384400-91873432398358118402994Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912nch1-master-1.nc-master-1.local3/26/2022 8:45:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402993Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912nch1-master-1.nc-master-1.local3/26/2022 8:45:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402992Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041088nch1-master-1.nc-master-1.local3/26/2022 8:45:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402991Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804908nch1-master-1.nc-master-1.local3/26/2022 8:45:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402990Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804908nch1-master-1.nc-master-1.local3/26/2022 8:45:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402989Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904nch1-master-1.nc-master-1.local3/26/2022 8:45:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402988Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904nch1-master-1.nc-master-1.local3/26/2022 8:45:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402987Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804908nch1-master-1.nc-master-1.local3/26/2022 8:45:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402986Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804908nch1-master-1.nc-master-1.local3/26/2022 8:45:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402985Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804908nch1-master-1.nc-master-1.local3/26/2022 8:45:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402984Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804908nch1-master-1.nc-master-1.local3/26/2022 8:45:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082983Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem820824nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:25 PM66e3049f-4152-0005-a304-e3665241d801systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042982Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem692696nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082981Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4508nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is now operational.230410160-92233720368547758082980Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136nch1-master-1.nc-master-1.local3/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082979Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is no longer operational.240410170-92233720368547758082978Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136nch1-master-1.nc-master-1.local3/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Protocol NIC /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully bound to port F333C198-171B-4677-9013-47F16A8E8264 (Friendly Name: br-data_External) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).170410120-92233720368547758082977Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully connected to port F333C198-171B-4677-9013-47F16A8E8264 (Friendly Name: br-data_External) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758082976Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully updated NIC NDIS QoS with Miniport NIC /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: Microsoft Hyper-V Network Adapter #2)1910400-92233720368547758082975Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136nch1-master-1.nc-master-1.local3/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: ).2330400-92233720368547758082974Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136nch1-master-1.nc-master-1.local3/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082973Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082972Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082971Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00nch1-master-1.nc-master-1.local3/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082970Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00nch1-master-1.nc-master-1.local3/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082969Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4204nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082968Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4204nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082967Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4204nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082966Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4204nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082965Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4204nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082964Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4204nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082963Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082962Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
If Digest support selected for iSCSI Session, Will use Processor support for Digest computation.671638440360287970189639682961iScsiPrtSystemnch1-master-1.nc-master-1.local3/26/2022 8:45:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Switch F777BEF2-695E-41BB-A107-6121A6B241DB (Friendly Name: br-data) successfully initialized.90410050-92233720368547758082960Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4204nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F777BEF2-695E-41BB-A107-6121A6B241DB (Friendly Name: br-data) successfully connected to port F777BEF2-695E-41BB-A107-6121A6B241DB (Friendly Name: br-data) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758082959Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4204nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F777BEF2-695E-41BB-A107-6121A6B241DB (Friendly Name: br-data).2330400-92233720368547758082958Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4204nch1-master-1.nc-master-1.local3/26/2022 8:45:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802957Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48nch1-master-1.nc-master-1.local3/26/2022 8:45:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802956Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4184nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442955Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682954VfpExtSystemnch1-master-1.nc-master-1.local3/26/2022 8:45:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442953Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume C: (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062952Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4204nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442951Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442950Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442949Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442948Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442947Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442946Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082945Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082944Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082943Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082942Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082941Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082940Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2022?-?03?-?26T20:45:17.499982300Z.120410-92233720368547756802939Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48nch1-master-1.nc-master-1.localS-1-5-183/26/2022 8:45:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2022?-?03?-?26T20:45:10.249258500Z.130420-92233720368547756802938Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem43996nch1-master-1.nc-master-1.local3/26/2022 8:45:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162937Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System692696nch1-master-1.nc-master-1.local3/26/2022 8:45:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service entered the stopped state.7036016384400-91873432398358118402936Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-1.nc-master-1.local3/26/2022 8:45:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402935Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-1.nc-master-1.local3/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).370400-92233720368547758082934Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14321760nch1-master-1.nc-master-1.localS-1-5-193/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system uptime is 9 seconds.60133276840360287970189639682933EventLogSystemnch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682932EventLogSystemnch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682931EventLogSystemnch1-master-1.nc-master-1.local3/26/2022 8:45:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services service entered the stopped state.7036016384400-91873432398358118402930Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-1.nc-master-1.local3/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402929Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-1.nc-master-1.local3/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402928Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-1.nc-master-1.local3/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402927Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-1.nc-master-1.local3/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402926Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-1.nc-master-1.local3/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402925Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-1.nc-master-1.local3/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402924Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-1.nc-master-1.local3/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402923Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKE and AuthIP IPsec Keying Modules service entered the stopped state.7036016384400-91873432398358118402922Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the stopped state.7036016384400-91873432398358118402921Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service entered the stopped state.7036016384400-91873432398358118402920Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402919Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Software Shadow Copy Provider service entered the stopped state.7036016384400-91873432398358118402918Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402917Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402916Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the stopped state.7036016384400-91873432398358118402915Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the stopped state.7036016384400-91873432398358118402914Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IPsec Policy Agent service entered the stopped state.7036016384400-91873432398358118402913Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Ceph RBD Mapping Service service entered the stopped state.7036016384400-91873432398358118402912Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804608nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402911Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804608nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402910Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804608nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Install Service service entered the stopped state.7036016384400-91873432398358118402909Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522908Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem14401548nch1-master-1S-1-5-193/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic System Host service entered the stopped state.7036016384400-91873432398358118402907Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804988nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Initiator Service service entered the stopped state.7036016384400-91873432398358118402906Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804988nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522905Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System14401584nch1-master-1S-1-5-193/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402904Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043868nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402903Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8044228nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services UserMode Port Redirector service entered the stopped state.7036016384400-91873432398358118402902Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8044996nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402901Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8044996nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2022?-?03?-?26T20:45:06.582000000Z from ?2022?-?03?-?26T20:45:06.590280000Z. Change Reason: An application or system component changed the time.11450-92233720368547757922900Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14321504nch1-master-1S-1-5-193/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HV Host Service service entered the stopped state.7036016384400-91873432398358118402899Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8044300nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402898Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682897EventLogSystemnch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is not listening for WS-Management requests. User Action If you did not intentionally stop the service, use the following command to see the WinRM configuration: winrm enumerate winrm/config/listener1014907300360287970189639682896Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the stopped state.7036016384400-91873432398358118402895Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043672nch1-master-13/26/2022 8:45:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402894Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043672nch1-master-13/26/2022 8:45:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402893Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:45:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402892Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043672nch1-master-13/26/2022 8:45:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402891Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8043672nch1-master-13/26/2022 8:45:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\system32\shutdown.exe (NCH1-MASTER-1) has initiated the restart of computer NCH1-MASTER-1 on behalf of user NCH1-MASTER-1\Admin for the following reason: No title for this reason could be found Reason Code: 0x800000ff Shutdown Type: restart Comment: Reboot initiated by Ansible1074032768400-91873432398358118402890User32b0aa8734-56f7-41cc-b2f4-de228e98b946System596612nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:45:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402889Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9803744nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:45:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Netlogon service entered the running state.7036016384400-91873432398358118402888Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:45:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The machine nch1-master-1 successfully joined the domain nc-master-1.local.40960400-92233720368547758082887NetJoin9741fd4e-3757-479f-a3c6-fc49f6d5edd0System13401376nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:45:02 PM00000000-0000-0000-0100-000000000000systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Connectivity Assistant service entered the stopped state.7036016384400-91873432398358118402886Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:45:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
This computer has been successfully joined to domain 'nc-master-1.local'.3260040360287970189639682885WorkstationSystemnch1-master-13/26/2022 8:45:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402884Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9803744nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:44:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402883Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9803744nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:44:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402882Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9803744nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:44:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402881Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9803744nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:44:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402880Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:44:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402879Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:35:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402878Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:34:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402877Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:34:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402876Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:27:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402875Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-13/26/2022 8:26:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402874Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-13/26/2022 8:26:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The firewall exception to allow Internet Storage Name Server (iSNS) client functionality is not enabled. iSNS client functionality is not available.121030360287970189639682873MSiSCSISystemnch1-master-13/26/2022 8:25:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Initiator Service service entered the running state.7036016384400-91873432398358118402872Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:25:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118402871Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:25:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
If Digest support selected for iSCSI Session, Will use Processor support for Digest computation.671638440360287970189639682870iScsiPrtSystemnch1-master-13/26/2022 8:25:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118402869Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:25:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft iSCSI Initiator Service service was changed from demand start to auto start.7040016384400-91873432398358118402868Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:25:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402867Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:25:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402866Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:25:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402865Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:24:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402864Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:24:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402863Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:24:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402862Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:24:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402861Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:24:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402860Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:24:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402859Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:24:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402858Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:24:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402857Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:23:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402856Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:23:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402855Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:23:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402854Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:23:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402853Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041652nch1-master-13/26/2022 8:23:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402852Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041652nch1-master-13/26/2022 8:23:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402851Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041652nch1-master-13/26/2022 8:23:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Installer service entered the stopped state.7036016384400-91873432398358118402850Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041652nch1-master-13/26/2022 8:22:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402849Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:22:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402848Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:22:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402847Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:22:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402846Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:21:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402845Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041652nch1-master-13/26/2022 8:21:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402844Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041652nch1-master-13/26/2022 8:20:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402843Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041652nch1-master-13/26/2022 8:20:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402842Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:19:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402841Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:19:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402840Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:19:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402839Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:19:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402838Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880nch1-master-13/26/2022 8:18:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402837Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:18:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402836Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:18:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the running state.7036016384400-91873432398358118402835Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880nch1-master-13/26/2022 8:18:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402834Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:18:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402833Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:18:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402832Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:18:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402831Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:17:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402830Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:17:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Ceph RBD Mapping Service service entered the running state.7036016384400-91873432398358118402829Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:17:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: MpKslc6cc6953 Service File Name: C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A270ACCD-8306-4856-A229-3126570BA485}\MpKslDrv.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: 7045016384400-91873432398358118402828Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-1S-1-5-183/26/2022 8:17:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118402827Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-13/26/2022 8:17:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the running state.7036016384400-91873432398358118402826Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:17:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver wnbd.inf_amd64_66627684a7738f9f\wnbd.inf for Device Instance ID ROOT\SCSIADAPTER\0000 with the following status: 0x0.200010470050-92233720368547758082825Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25363444nch1-master-1S-1-5-183/26/2022 8:17:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118402824Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:17:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: WNBD SCSI Virtual Adapter Service File Name: System32\drivers\wnbd.sys Service Type: kernel mode driver Service Start Type: boot start Service Account: 7045016384400-91873432398358118402823Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-1S-1-5-183/26/2022 8:17:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: Ceph RBD Mapping Service Service File Name: "c:\Program Files\Ceph\bin\rbd-wnbd.exe" service Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem7045016384400-91873432398358118402822Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-1S-1-5-183/26/2022 8:17:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Installer service entered the running state.7036016384400-91873432398358118402821Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:17:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402820Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:17:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402819Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:17:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402818Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:17:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402817Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:17:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402816Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:17:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402815Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:17:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402814Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:17:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402813Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:17:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402812Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:17:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402811Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:17:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402810Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:15:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402809Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:15:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Installer service entered the stopped state.7036016384400-91873432398358118402808Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:15:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118402807Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:15:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118402806Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:14:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118402805Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:14:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Registry service entered the stopped state.7036016384400-91873432398358118402804Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:14:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The App Readiness service entered the stopped state.7036016384400-91873432398358118402803Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:14:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402802Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:13:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402801Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:12:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402800Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:12:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402799Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:12:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402798Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:12:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402797Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:12:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the stopped state.7036016384400-91873432398358118402796Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:12:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402795Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:11:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the running state.7036016384400-91873432398358118402794Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:10:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402793Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:10:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402792Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:10:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402791Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:10:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402790Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:10:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402789Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:10:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402788Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:10:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402787Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801784nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:10:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402786Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:10:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402785Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:10:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402784Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:10:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118402783Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:10:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402782Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:10:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118402781Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:10:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402780Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:10:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Installer service entered the running state.7036016384400-91873432398358118402779Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:10:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402778Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:10:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402777Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:10:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402776Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-13/26/2022 8:09:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402775Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801012nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:09:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402774Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:09:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402773Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:09:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402772Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:09:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118402771Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-13/26/2022 8:09:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402770Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-13/26/2022 8:09:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118402769Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-13/26/2022 8:09:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402768Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801012nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:09:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402767Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:08:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402766Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:08:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402765Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:08:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402764Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:08:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402763Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:08:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushsvc service entered the stopped state.7036016384400-91873432398358118402762Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:08:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402761Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801012nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402760Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801012nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402759Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801012nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402758Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801012nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402757Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801012nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402756Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801012nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402755Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-203/26/2022 8:07:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402754Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801012nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402753Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801012nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402752Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-203/26/2022 8:07:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the running state.7036016384400-91873432398358118402751Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:07:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Biometric Service service entered the stopped state.7036016384400-91873432398358118402750Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:07:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).370400-92233720368547758082749Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14321500nch1-master-1S-1-5-193/26/2022 8:07:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402748Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem98088nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).370400-92233720368547758082747Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14323764nch1-master-1S-1-5-193/26/2022 8:07:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402746Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801016nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).370400-92233720368547758082745Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14321500nch1-master-1S-1-5-193/26/2022 8:07:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402744Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801640nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the stopped state.7036016384400-91873432398358118402743Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041580nch1-master-13/26/2022 8:07:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).370400-92233720368547758082742Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14321528nch1-master-1S-1-5-193/26/2022 8:07:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402741Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801016nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).370400-92233720368547758082740Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14323268nch1-master-1S-1-5-193/26/2022 8:07:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully connected to port F333C198-171B-4677-9013-47F16A8E8264 (Friendly Name: br-data_External) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758082739Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25002880nch1-master-1S-1-5-183/26/2022 8:07:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is now operational.230410160-92233720368547758082738Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5883064nch1-master-13/26/2022 8:07:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082737Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem5883064nch1-master-1S-1-5-183/26/2022 8:07:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is no longer operational.240410170-92233720368547758082736Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5883064nch1-master-13/26/2022 8:07:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is no longer operational.240410170-92233720368547758082735Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5883064nch1-master-13/26/2022 8:07:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Protocol NIC /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully bound to port (Friendly Name: ) on switch (Friendly Name: ).170410120-92233720368547758082734Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5883064nch1-master-1S-1-5-183/26/2022 8:07:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully updated NIC NDIS QoS with Miniport NIC /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: Microsoft Hyper-V Network Adapter #2)1910400-92233720368547758082733Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5883064nch1-master-13/26/2022 8:07:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic /DEVICE/{4DBCABCA-B7D1-454B-AD06-6B9F90444E88} (Friendly Name: ).2330400-92233720368547758082732Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5883064nch1-master-13/26/2022 8:07:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082731Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem5883064nch1-master-1S-1-5-183/26/2022 8:07:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082730Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4864nch1-master-1S-1-5-183/26/2022 8:07:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082729Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4512nch1-master-1S-1-5-183/26/2022 8:07:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082728Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem5883036nch1-master-13/26/2022 8:07:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082727Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4512nch1-master-1S-1-5-183/26/2022 8:07:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' is halting60410030-92233720368547758082726Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem41256nch1-master-1S-1-5-183/26/2022 8:07:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal is no longer active.42010400-92233720368547758082725Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System588316nch1-master-1S-1-5-183/26/2022 8:07:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082724Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem41256nch1-master-1S-1-5-183/26/2022 8:07:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Switch F777BEF2-695E-41BB-A107-6121A6B241DB (Friendly Name: br-data) successfully initialized.90410050-92233720368547758082723Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25003236nch1-master-1S-1-5-183/26/2022 8:07:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F777BEF2-695E-41BB-A107-6121A6B241DB (Friendly Name: br-data) successfully connected to port F777BEF2-695E-41BB-A107-6121A6B241DB (Friendly Name: br-data) on switch F777BEF2-695E-41BB-A107-6121A6B241DB(Friendly Name: br-data).2320400-92233720368547758082722Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25003236nch1-master-1S-1-5-183/26/2022 8:07:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F777BEF2-695E-41BB-A107-6121A6B241DB (Friendly Name: br-data).2330400-92233720368547758082721Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25003236nch1-master-13/26/2022 8:07:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver wvms_mp.inf_amd64_e1065995a017ab1b\wvms_mp.inf for Device Instance ID ROOT\VMS_VSMP\0000 with the following status: 0x0.200010470050-92233720368547758082720Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System22284036nch1-master-1S-1-5-183/26/2022 8:07:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: VMSMP Service File Name: \SystemRoot\System32\drivers\vmswitch.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: 7045016384400-91873432398358118402719Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-1S-1-5-183/26/2022 8:07:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118402718Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-13/26/2022 8:07:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402717Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem98088nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the neutron-hyperv-agent service was changed from auto start to demand start.7040016384400-91873432398358118402716Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: neutron-hyperv-agent Service File Name: c:\openstack\bin\OpenStackService.exe neutron-hyperv-agent c:\python38\scripts\neutron-hyperv-agent.exe --config-file c:\openstack\etc\neutron-hyperv-agent.conf Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem7045016384400-91873432398358118402715Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nova-compute service was changed from auto start to demand start.7040016384400-91873432398358118402714Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: nova-compute Service File Name: c:\openstack\bin\OpenStackService.exe nova-compute c:\python38\scripts\nova-compute.exe --config-file c:\openstack\etc\nova.conf Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem7045016384400-91873432398358118402713Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402712Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem98088nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKE and AuthIP IPsec Keying Modules service entered the running state.7036016384400-91873432398358118402711Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:07:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the IKE and AuthIP IPsec Keying Modules service was changed from demand start to auto start.7040016384400-91873432398358118402710Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-1S-1-5-183/26/2022 8:07:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118402709Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-13/26/2022 8:07:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402708Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem98088nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:07:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402707Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem98088nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:06:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402706Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem98088nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:06:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MapsBroker service entered the stopped state.7036016384400-91873432398358118402705Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:06:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118402704Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:06:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402703Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem98088nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:06:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402702Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:06:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UALSVC service entered the running state.7036016384400-91873432398358118402701Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-13/26/2022 8:06:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the running state.7036016384400-91873432398358118402700Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-13/26/2022 8:06:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MapsBroker service entered the running state.7036016384400-91873432398358118402699Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:06:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WdiSystemHost service entered the running state.7036016384400-91873432398358118402698Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:06:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DPS service entered the running state.7036016384400-91873432398358118402697Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:06:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the running state.7036016384400-91873432398358118402696Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:06:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402695Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:06:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402694Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:05:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2022?-?03?-?26T20:05:17.351000000Z from ?2022?-?03?-?26T20:05:17.363479600Z. Change Reason: An application or system component changed the time.11450-92233720368547757922693Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14321504nch1-master-1S-1-5-193/26/2022 8:05:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the stopped state.7036016384400-91873432398358118402692Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:05:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402691Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem98088nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:05:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PolicyAgent service entered the running state.7036016384400-91873432398358118402690Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:05:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SSL Certificate Settings created by an admin process for endpoint : 0.0.0.0:5986 .15301032768300360287970189639682689Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System4384nch1-master-13/26/2022 8:05:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Reservation for namespace identified by URL prefix https://+:5986/wsman/ was successfully added.15007016384400360287970189639682688Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System4384nch1-master-13/26/2022 8:05:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Reservation for namespace identified by URL prefix https://+:5986/wsman/ was successfully deleted.15008016384400360287970189639682687Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System4384nch1-master-13/26/2022 8:05:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the stopped state.7036016384400-91873432398358118402686Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:05:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639682685Virtual Disk ServiceSystemnch1-master-13/26/2022 8:05:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the running state.7036016384400-91873432398358118402684Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:05:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639682683Virtual Disk ServiceSystemnch1-master-13/26/2022 8:05:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\Admin SID (S-1-5-21-1417426523-634556122-2994118469-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402682Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801908nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10013/26/2022 8:04:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).350400-92233720368547758082681Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14321540nch1-master-1S-1-5-193/26/2022 8:04:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\cloudbase-init SID (S-1-5-21-1417426523-634556122-2994118469-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402680Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801908nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10003/26/2022 8:04:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrustedInstaller service entered the running state.7036016384400-91873432398358118402679Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:04:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118402678Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:04:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 1 Group Policy objects were detected and applied.15020401-92233720368547758082677Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System5883620nch1-master-1S-1-5-183/26/2022 8:04:26 PM15ef0c2c-9fb6-44f2-8b91-9c3e5b1b767dsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TBS device identifier has been generated.12820400-92233720368547758082676Microsoft-Windows-TPM-WMI7d5387b0-cbe0-11da-a94d-0800200c9a66System23283652nch1-master-1S-1-5-183/26/2022 8:04:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the stopped state.7036016384400-91873432398358118402675Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:04:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The swprv service entered the running state.7036016384400-91873432398358118402674Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:04:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:192.168.0.17 has been brought up.42000400-92233720368547758082673Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System5882828nch1-master-1S-1-5-183/26/2022 8:04:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:10.222.0.21 has been brought up.42000400-92233720368547758082672Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System5882828nch1-master-1S-1-5-183/26/2022 8:04:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wuauserv service entered the running state.7036016384400-91873432398358118402671Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:04:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the running state.7036016384400-91873432398358118402670Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:04:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NCH1-MASTER-1\cloudbase-init SID (S-1-5-21-1417426523-634556122-2994118469-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402669Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801908nch1-master-1S-1-5-21-1417426523-634556122-2994118469-10003/26/2022 8:04:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LicenseManager service entered the running state.7036016384400-91873432398358118402668Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
This event triggers the TBS device identifier generation.12810400-92233720368547758082667Microsoft-Windows-TPM-WMI7d5387b0-cbe0-11da-a94d-0800200c9a66System5883000nch1-master-1S-1-5-183/26/2022 8:04:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A new self signed certificate to be used for RD Session Host Server authentication on SSL connections was generated. The name on this certificate is nch1-master-1. The SHA1 hash of the certificate is in the event data.1056049152400360287970189639682666Microsoft-Windows-TerminalServices-RemoteConnectionManagerc76baa63-ae81-421c-b425-340b4b24157fSystem00nch1-master-13/26/2022 8:04:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SessionEnv service entered the running state.7036016384400-91873432398358118402665Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the running state.7036016384400-91873432398358118402664Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UmRdpService service entered the running state.7036016384400-91873432398358118402663Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041580nch1-master-13/26/2022 8:04:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TermService service entered the running state.7036016384400-91873432398358118402662Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the cloudbase-init service was changed from demand start to auto start.7040016384400-91873432398358118402661Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-1S-1-5-183/26/2022 8:04:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The KeyIso service entered the running state.7036016384400-91873432398358118402660Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmcompute service entered the running state.7036016384400-91873432398358118402659Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ClipSVC service entered the running state.7036016384400-91873432398358118402658Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888nch1-master-13/26/2022 8:04:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442657Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4136nch1-master-1S-1-5-183/26/2022 8:04:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DmEnrollmentSvc service entered the stopped state.7036016384400-91873432398358118402656Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DmEnrollmentSvc service entered the running state.7036016384400-91873432398358118402655Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wlidsvc service entered the running state.7036016384400-91873432398358118402654Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981442653Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4384nch1-master-1S-1-5-183/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118402652Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the running state.7036016384400-91873432398358118402651Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118402650Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118402649Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118402648Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804808nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118402647Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118402646Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118402645Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041580nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).370400-92233720368547758082644Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14321540nch1-master-1S-1-5-193/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118402643Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118402642Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041636nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118402641Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041664nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118402640Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041848nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118402639Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041644nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118402638Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041808nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118402637Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041808nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118402636Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041808nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402635Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041808nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118402634Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041860nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118402633Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118402632Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041808nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118402631Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041580nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118402630Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041580nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118402629Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118402628Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041580nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118402627Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118402626Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402625Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041808nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402624Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041808nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639682623Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00nch1-master-13/26/2022 8:04:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402622Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041808nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402621Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041808nch1-master-13/26/2022 8:04:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118402620Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041808nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402619Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041644nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402618Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041644nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402617Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041808nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402616Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041808nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402615Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041628nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402614Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041860nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442613Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4508nch1-master-1S-1-5-183/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442612Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4508nch1-master-1S-1-5-183/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402611Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041580nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442610Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4508nch1-master-1S-1-5-183/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcbService service entered the running state.7036016384400-91873432398358118402609Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppReadiness service entered the running state.7036016384400-91873432398358118402608Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DsmSvc service entered the running state.7036016384400-91873432398358118402607Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the running state.7036016384400-91873432398358118402606Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2022?-?03?-?26T20:04:15.778000000Z from ?2022?-?03?-?26T20:04:15.656417900Z. Change Reason: An application or system component changed the time.11450-92233720368547757922605Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14401900nch1-master-1S-1-5-193/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402604Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402603Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402602Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118402601Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402600Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041812nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402599Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041664nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402598Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041656nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402597Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041580nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402596Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041580nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522595Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System14401584nch1-master-1S-1-5-193/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522594Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem14401548nch1-master-1S-1-5-193/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402593Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402592Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118402591Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900nch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118402590Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900nch1-master-13/26/2022 8:04:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully logged OS information2004044000023059837467020492802589Microsoft-Windows-Setup75ebc33e-997f-49cf-b49f-ecc50184b75dSystem11841188nch1-master-1S-1-5-183/26/2022 8:04:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoOS informationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118402588Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896nch1-master-13/26/2022 8:04:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppXSvc service entered the running state.7036016384400-91873432398358118402587Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896nch1-master-13/26/2022 8:04:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118402586Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896nch1-master-13/26/2022 8:04:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushservice service entered the running state.7036016384400-91873432398358118402585Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896nch1-master-13/26/2022 8:04:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402584Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896nch1-master-13/26/2022 8:04:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118402583Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896nch1-master-13/26/2022 8:04:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DeviceInstall service entered the running state.7036016384400-91873432398358118402582Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896nch1-master-13/26/2022 8:04:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402581Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896nch1-master-13/26/2022 8:04:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402580Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896nch1-master-13/26/2022 8:04:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402579Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900nch1-master-13/26/2022 8:04:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402578Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896nch1-master-13/26/2022 8:04:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402577Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900nch1-master-13/26/2022 8:04:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402576Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900nch1-master-13/26/2022 8:04:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402575Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900nch1-master-13/26/2022 8:04:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402574Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900nch1-master-13/26/2022 8:04:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082573Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem820824nch1-master-1S-1-5-183/26/2022 8:04:00 PM9e4b2785-414c-0005-8827-4b9e4c41d801systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042572Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem692696nch1-master-1S-1-5-183/26/2022 8:03:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082571Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4228nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082570Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082569Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082568Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4228nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082567Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00nch1-master-13/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082566Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00nch1-master-13/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082565Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082564Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082563Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082562Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082561Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082560Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082559Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082558Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4228nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802557Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48nch1-master-13/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802556Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4228nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442555Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48nch1-master-1S-1-5-183/26/2022 8:03:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682554VfpExtSystemnch1-master-13/26/2022 8:03:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442553Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48nch1-master-1S-1-5-183/26/2022 8:03:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume C: (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062552Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4188nch1-master-1S-1-5-183/26/2022 8:03:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442551Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48nch1-master-1S-1-5-183/26/2022 8:03:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442550Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48nch1-master-1S-1-5-183/26/2022 8:03:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442549Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48nch1-master-1S-1-5-183/26/2022 8:03:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442548Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48nch1-master-1S-1-5-183/26/2022 8:03:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442547Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48nch1-master-1S-1-5-183/26/2022 8:03:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442546Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48nch1-master-1S-1-5-183/26/2022 8:03:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082545Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48nch1-master-1S-1-5-183/26/2022 8:03:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082544Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48nch1-master-1S-1-5-183/26/2022 8:03:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082543Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48nch1-master-1S-1-5-183/26/2022 8:03:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082542Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48nch1-master-1S-1-5-183/26/2022 8:03:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082541Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48nch1-master-1S-1-5-183/26/2022 8:03:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082540Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48nch1-master-1S-1-5-183/26/2022 8:03:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2022?-?03?-?26T20:03:53.497938600Z.120410-92233720368547756802539Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48nch1-master-1S-1-5-183/26/2022 8:03:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2022?-?03?-?26T20:03:46.017057400Z.130420-92233720368547756802538Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem42684nch1-master-13/26/2022 8:03:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162537Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System692696nch1-master-13/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service entered the stopped state.7036016384400-91873432398358118402536Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332nch1-master-13/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402535Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332nch1-master-13/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402534Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332nch1-master-13/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402533Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332nch1-master-13/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402532Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332nch1-master-13/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system uptime is 21 seconds.60133276840360287970189639682531EventLogSystemnch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682530EventLogSystemnch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682529EventLogSystemnch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetBIOS name and DNS host name of this machine have been changed from WIN-BQS743NAU2G to NCH1-MASTER-1.60113276840360287970189639682528EventLogSystemnch1-master-13/26/2022 8:04:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402527Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402526Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402525Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402524Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402523Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402522Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402521Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402520Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402519Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402518Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402517Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402516Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041396WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522515Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem12961544WIN-5T344G8GM1HS-1-5-193/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522514Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System12961676WIN-5T344G8GM1HS-1-5-193/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402513Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2022?-?03?-?26T20:03:45.219000000Z from ?2022?-?03?-?26T20:03:45.233939200Z. Change Reason: An application or system component changed the time.11450-92233720368547757922512Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14762284WIN-5T344G8GM1HS-1-5-193/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Install Service service entered the stopped state.7036016384400-91873432398358118402511Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402510Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HV Host Service service entered the stopped state.7036016384400-91873432398358118402509Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041388WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402508Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402507Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041388WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402506Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041388WIN-5T344G8GM1H3/26/2022 8:03:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402505Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041388WIN-5T344G8GM1H3/26/2022 8:03:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682504EventLogSystemWIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is not listening for WS-Management requests. User Action If you did not intentionally stop the service, use the following command to see the WinRM configuration: winrm enumerate winrm/config/listener1014907300360287970189639682503Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00WIN-5T344G8GM1H3/26/2022 8:03:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402502Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041388WIN-5T344G8GM1H3/26/2022 8:03:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402501Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H3/26/2022 8:03:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Network Inspection Service service entered the stopped state.7036016384400-91873432398358118402500Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H3/26/2022 8:03:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\system32\winlogon.exe (WIN-5T344G8GM1H) has initiated the restart of computer WIN-BQS743NAU2G on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Upgrade (Planned) Reason Code: 0x80020003 Shutdown Type: restart Comment: 1074032768400-91873432398358118402499User32b0aa8734-56f7-41cc-b2f4-de228e98b946System604756WIN-5T344G8GM1HS-1-5-183/26/2022 8:03:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtual Disk service entered the stopped state.7036016384400-91873432398358118402498Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H3/26/2022 8:03:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Network Inspection Service service entered the running state.7036016384400-91873432398358118402497Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H3/26/2022 8:03:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639682496Virtual Disk ServiceSystemWIN-5T344G8GM1H3/26/2022 8:03:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtual Disk service entered the running state.7036016384400-91873432398358118402495Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041380WIN-5T344G8GM1H3/26/2022 8:03:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639682494Virtual Disk ServiceSystemWIN-5T344G8GM1H3/26/2022 8:03:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402493Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041380WIN-5T344G8GM1H3/26/2022 8:03:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \??\C:\windows\System32\SMI\Store\Machine\SCHEMA.DAT was reorganized with a starting size of 12853248 bytes and an ending size of 11681792 bytes.150400-92233720368547758082492Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11681172WIN-5T344G8GM1HS-1-5-183/26/2022 8:03:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \??\C:\windows\System32\config\COMPONENTS was reorganized with a starting size of 71872512 bytes and an ending size of 56864768 bytes.150400-92233720368547758082491Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11681172WIN-5T344G8GM1HS-1-5-183/26/2022 8:03:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).350400-92233720368547758082490Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14761504WIN-5T344G8GM1HS-1-5-193/26/2022 8:03:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082489Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.MiracastView_6.3.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082488Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082487Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameCallableUI_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082486Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.14393.1715_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082485Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082484Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082483Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.14393.1066_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082482Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.AssignedAccessLockApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082481Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082480Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.LockApp_10.0.14393.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082479Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BioEnrollment_10.0.14393.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082478Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AccountsControl_10.0.14393.1715_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082477Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082476Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem9762948WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\AppCompat\Programs\Amcache.hve was cleared updating 629 keys and creating 196 modified pages.160400-92233720368547758082475Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem21122464WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver wvmbusvideo.inf_amd64_1f06cc897822eef5\wvmbusvideo.inf for Device Instance ID VMBUS\{DA0A7802-E377-4AAC-8E77-0558EB1073F8}\{5620E0C7-8062-4DCE-AEB7-520C7EF76171} with the following status: 0x0.200010470050-92233720368547758082474Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25642616WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service HyperVideo for Device Instance ID VMBUS\{DA0A7802-E377-4AAC-8E77-0558EB1073F8}\{5620E0C7-8062-4DCE-AEB7-520C7EF76171} with the following status: 0.200030470050-92233720368547758082473Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25642616WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver msports.inf_amd64_280f71b0b084cc3b\msports.inf for Device Instance ID ACPI\PNP0501\1 with the following status: 0x0.200010470050-92233720368547758082472Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25722620WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serenum for Device Instance ID ACPI\PNP0501\1 with the following status: 0.200030470050-92233720368547758082471Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25722620WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serial for Device Instance ID ACPI\PNP0501\1 with the following status: 0.200030470050-92233720368547758082470Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25722620WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver msports.inf_amd64_280f71b0b084cc3b\msports.inf for Device Instance ID ACPI\PNP0501\2 with the following status: 0x0.200010470050-92233720368547758082469Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25802624WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Host Compute Service service entered the running state.7036016384400-91873432398358118402468Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H3/26/2022 8:02:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serenum for Device Instance ID ACPI\PNP0501\2 with the following status: 0.200030470050-92233720368547758082467Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25802624WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the running state.7036016384400-91873432398358118402466Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041392WIN-5T344G8GM1H3/26/2022 8:02:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serial for Device Instance ID ACPI\PNP0501\2 with the following status: 0.200030470050-92233720368547758082465Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25802624WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).370400-92233720368547758082464Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14761500WIN-5T344G8GM1HS-1-5-193/26/2022 8:02:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442463Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4188WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981442462Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4228WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118402461Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041380WIN-5T344G8GM1H3/26/2022 8:02:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118402460Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041260WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118402459Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804808WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118402458Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service terminated with the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.7023049152200-91873432398358118402457Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the stopped state.7036016384400-91873432398358118402456Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118402455Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118402454Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118402453Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the stopped state.7036016384400-91873432398358118402452Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118402451Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118402450Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118402449Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118402448Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041260WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118402447Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041388WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118402446Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118402445Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042104WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118402444Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041260WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118402443Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118402442Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118402441Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041260WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402440Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639682439Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00WIN-5T344G8GM1H3/26/2022 8:02:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118402438Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402437Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041260WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118402436Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041260WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118402435Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118402434Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118402433Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118402432Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118402431Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402430Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118402429Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service terminated with the following error: The device is not ready.7023049152200-91873432398358118402428Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the stopped state.7036016384400-91873432398358118402427Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402426Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402425Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041388WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402424Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041388WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402423Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522422Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System12961676WIN-5T344G8GM1HS-1-5-193/26/2022 8:02:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522421Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem12961544WIN-5T344G8GM1HS-1-5-193/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118402420Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118402419Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402418Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402417Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402416Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402415Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402414Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041388WIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402413Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402412Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402411Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041384WIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402410Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442409Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem432WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442408Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem432WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442407Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem432WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2022?-?03?-?26T20:02:46.653000000Z from ?2022?-?03?-?26T20:02:45.605646800Z. Change Reason: An application or system component changed the time.11450-92233720368547757922406Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem12961424WIN-5T344G8GM1HS-1-5-193/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402405Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H3/26/2022 8:02:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402404Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H3/26/2022 8:02:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402403Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041412WIN-5T344G8GM1H3/26/2022 8:02:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402402Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H3/26/2022 8:02:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402401Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H3/26/2022 8:02:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DsmSvc service entered the running state.7036016384400-91873432398358118402400Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H3/26/2022 8:02:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 10 keys and creating 2 modified pages.160400-92233720368547758082399Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem908940WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402398Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118402397Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppXSvc service entered the running state.7036016384400-91873432398358118402396Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082395Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4472WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082394Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4472WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082393Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00WIN-5T344G8GM1H3/26/2022 8:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082392Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4472WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082391Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082390Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4468WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082389Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00WIN-5T344G8GM1H3/26/2022 8:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082388Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4468WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118402387Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushservice service entered the running state.7036016384400-91873432398358118402386Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402385Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118402384Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DeviceInstall service entered the running state.7036016384400-91873432398358118402383Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402382Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402381Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402380Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402379Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H3/26/2022 8:02:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402378Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402377Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402376Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402375Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880WIN-5T344G8GM1H3/26/2022 8:02:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082374Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem820824WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:35 PM61a063e3-414c-0005-e763-a0614c41d801systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042373Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem692696WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Default\NTUSER.DAT was cleared updating 126 keys and creating 18 modified pages.160400-92233720368547758082372Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 628 keys and creating 85 modified pages.160400-92233720368547758082371Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Administrator\NTUSER.DAT was cleared updating 1935 keys and creating 116 modified pages.160400-92233720368547758082370Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 128 keys and creating 20 modified pages.160400-92233720368547758082369Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 137 keys and creating 21 modified pages.160400-92233720368547758082368Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 80 keys and creating 7 modified pages.160400-92233720368547758082367Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4548WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 87 keys and creating 5 modified pages.160400-92233720368547758082366Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4532WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 229 keys and creating 27 modified pages.160400-92233720368547758082365Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4544WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 78917632 bytes and an ending size of 74686464 bytes.150400-92233720368547758082364Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4536WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 82 keys and creating 1 modified pages.160400-92233720368547758082363Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem484488WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 5177344 bytes and an ending size of 5169152 bytes.150400-92233720368547758082362Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4188WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082361Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4228WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082360Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4228WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082359Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4228WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082358Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4228WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082357Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4228WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082356Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4228WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802355Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48WIN-5T344G8GM1H3/26/2022 8:02:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802354Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4468WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442353Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682352VfpExtSystemWIN-5T344G8GM1H3/26/2022 8:02:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442351Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume \\?\Volume{be07386b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062350Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4188WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442349Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442348Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442347Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442346Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442345Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442344Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082343Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082342Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082341Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082340Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082339Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082338Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2022?-?03?-?26T20:02:11.477497300Z.120410-92233720368547756802337Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48WIN-5T344G8GM1HS-1-5-183/26/2022 8:02:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2018?-?01?-?19T09:48:14.082208700Z.130420-92233720368547756802336Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem42896WIN-5T344G8GM1H1/19/2018 9:48:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162335Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System520524WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service entered the stopped state.7036016384400-91873432398358118402334Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682333EventLogSystemWIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682332EventLogSystemWIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetBIOS name and DNS host name of this machine have been changed from WIN-5T344G8GM1H to WIN-BQS743NAU2G.60113276840360287970189639682331EventLogSystemWIN-5T344G8GM1H3/26/2022 8:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402330Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402329Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402328Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402327Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402326Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402325Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402324Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402323Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service entered the stopped state.7036016384400-91873432398358118402322Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402321Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the stopped state.7036016384400-91873432398358118402320Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402319Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services service entered the stopped state.7036016384400-91873432398358118402318Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Software Shadow Copy Provider service entered the stopped state.7036016384400-91873432398358118402317Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402316Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402315Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402314Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services UserMode Port Redirector service entered the stopped state.7036016384400-91873432398358118402313Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561100WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402312Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656416WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402311Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656416WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2018?-?01?-?19T09:48:13.152000000Z from ?2018?-?01?-?19T09:48:13.164762500Z. Change Reason: An application or system component changed the time.11450-92233720368547757922310Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem12442300WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Credential Manager service entered the stopped state.7036016384400-91873432398358118402309Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561080WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402308Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6562116WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402307Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561048WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522306Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem4361300WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522305Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System4361360WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402304Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402303Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402302Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402301Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402300Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402299Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
User Logoff Notification for Customer Experience Improvement Program7002041102023058781935857827842298Microsoft-Windows-Winlogondbe9b383-7cf3-4331-91cc-a3cb16a3b538System584916WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682297EventLogSystemWIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CDPUserSvc_24762 service entered the stopped state.7036016384400-91873432398358118402296Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Sync Host_24762 service entered the stopped state.7036016384400-91873432398358118402295Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402294Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem820972WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the stopped state.7036016384400-91873432398358118402293Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Configuration service entered the stopped state.7036016384400-91873432398358118402292Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\System32\Sysprep\Sysprep.exe (WIN-5T344G8GM1H) has initiated the shutdown of computer WIN-5T344G8GM1H on behalf of user WIN-5T344G8GM1H\Administrator for the following reason: No title for this reason could be found Reason Code: 0x40002 Shutdown Type: shutdown Comment: 1074032768400-91873432398358118402291User32b0aa8734-56f7-41cc-b2f4-de228e98b946System448464WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Process C:\Windows\System32\Sysprep\sysprep.exe (process ID:4012) reset policy scheme from {381B4222-F694-41F0-9685-FF5BB260DF2E} to {381B4222-F694-41F0-9685-FF5BB260DF2E}120410046116860184273879042290Microsoft-Windows-UserModePowerServicece8dee0b-d539-4000-b0f8-77bed049c590System764316WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the running state.7036016384400-91873432398358118402289Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402288Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402287Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)1340300-92233720368547758082286Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem12441320WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the running state.7036016384400-91873432398358118402285Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402284Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402283Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TCP/IP NetBIOS Helper service entered the stopped state.7036016384400-91873432398358118402282Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TCP/IP NetBIOS Helper service was successfully sent a stop control. The reason specified was: 0x40030011 [Operating System: Network Connectivity (Planned)] Comment: None7042016384400-91873432398358118402281Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport Teredo Tunneling Pseudo-Interface, {8A97E6D0-A2AF-48AE-8BC2-FFC865CC4DF6}, had event Network Interface deleted while PNP Device still exists. Note that this event is provided for informational purpose and might not be an error always (Eg: In case of vSwitch which was recently un-installed or a LBFO team was removed)10317022023058430092137103582280Microsoft-Windows-NDIScdead503-17f5-4a3e-b7ae-df8cc2902eb9System9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AM8a97e6d0-a2af-48ae-8bc2-ffc865cc4df6systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoPnPSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' is halting60410030-92233720368547758082279Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem41984WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport Microsoft Hyper-V Network Adapter #2, {518CDFA4-5492-4D9E-BEAA-908825A4A289}, had event Network Interface deleted while PNP Device still exists. Note that this event is provided for informational purpose and might not be an error always (Eg: In case of vSwitch which was recently un-installed or a LBFO team was removed)10317022023058430092137103582278Microsoft-Windows-NDIScdead503-17f5-4a3e-b7ae-df8cc2902eb9System9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AM518cdfa4-5492-4d9e-beaa-908825a4a289systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoPnPSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)1340300-92233720368547758082277Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem12441800WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.{518CDFA4-5492-4D9E-BEAA-908825A4A289} is no longer active.42010400-92233720368547758082276Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System9761376WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082275Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118402274Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft-Windows-Kernel-PnP/Configuration log file was cleared.104041040-92233720368547758082273Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the VIA StorX Storage RAID Controller Windows Driver service was changed from demand start to boot start.7040016384400-91873432398358118402272Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the vsmraid service was changed from demand start to boot start.7040016384400-91873432398358118402271Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Universal Flash Storage (UFS) Driver service was changed from demand start to boot start.7040016384400-91873432398358118402270Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Standard NVM Express Driver service was changed from demand start to boot start.7040016384400-91873432398358118402269Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the stexstor service was changed from demand start to boot start.7040016384400-91873432398358118402268Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SiSRaid4 service was changed from demand start to boot start.7040016384400-91873432398358118402267Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SiSRaid2 service was changed from demand start to boot start.7040016384400-91873432398358118402266Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Storage Class Memory Bus Driver service was changed from demand start to boot start.7040016384400-91873432398358118402265Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SBP-2 Transport/Protocol Bus Driver service was changed from demand start to boot start.7040016384400-91873432398358118402264Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic [FCoE] STOR Miniport Inbox Driver (wx64) service was changed from demand start to boot start.7040016384400-91873432398358118402263Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic iSCSI Miniport Inbox Driver service was changed from demand start to boot start.7040016384400-91873432398358118402262Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Fibre Channel STOR Miniport Inbox Driver (wx64) service was changed from demand start to boot start.7040016384400-91873432398358118402261Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the percsas3i service was changed from demand start to boot start.7040016384400-91873432398358118402260Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the percsas2i service was changed from demand start to boot start.7040016384400-91873432398358118402259Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the pcmcia service was changed from demand start to boot start.7040016384400-91873432398358118402258Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nvraid service was changed from demand start to boot start.7040016384400-91873432398358118402257Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nvstor service was changed from demand start to boot start.7040016384400-91873432398358118402256Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic 10 Gigabit Ethernet Adapter VBD service was changed from demand start to boot start.7040016384400-91873432398358118402255Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Network Adapter VBD service was changed from demand start to boot start.7040016384400-91873432398358118402254Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the mvumis service was changed from demand start to boot start.7040016384400-91873432398358118402253Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Standard SATA AHCI Driver service was changed from demand start to boot start.7040016384400-91873432398358118402252Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the pciide service was changed from demand start to boot start.7040016384400-91873432398358118402251Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasr service was changed from demand start to boot start.7040016384400-91873432398358118402250Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasas2i service was changed from demand start to boot start.7040016384400-91873432398358118402249Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasas service was changed from demand start to boot start.7040016384400-91873432398358118402248Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the isapnp service was changed from demand start to boot start.7040016384400-91873432398358118402247Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SSS service was changed from demand start to boot start.7040016384400-91873432398358118402246Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS3i service was changed from demand start to boot start.7040016384400-91873432398358118402245Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS2i service was changed from demand start to boot start.7040016384400-91873432398358118402244Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS service was changed from demand start to boot start.7040016384400-91873432398358118402243Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Intel RAID Controller Windows 7 service was changed from demand start to boot start.7040016384400-91873432398358118402242Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Intel(R) SATA RAID Controller Windows service was changed from demand start to boot start.7040016384400-91873432398358118402241Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the HpSAMD service was changed from demand start to boot start.7040016384400-91873432398358118402240Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the elxstor service was changed from demand start to boot start.7040016384400-91873432398358118402239Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the elxfcoe service was changed from demand start to boot start.7040016384400-91873432398358118402238Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols service was changed from demand start to boot start.7040016384400-91873432398358118402237Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the cht4iscsi service was changed from demand start to boot start.7040016384400-91873432398358118402236Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Offload iSCSI Driver service was changed from demand start to boot start.7040016384400-91873432398358118402235Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic FCoE Offload driver service was changed from demand start to boot start.7040016384400-91873432398358118402234Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the bfadfcoei service was changed from demand start to boot start.7040016384400-91873432398358118402233Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the bfadi service was changed from demand start to boot start.7040016384400-91873432398358118402232Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Adaptec SAS/SATA-II RAID Storport's Miniport Driver service was changed from demand start to boot start.7040016384400-91873432398358118402231Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdsbs service was changed from demand start to boot start.7040016384400-91873432398358118402230Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdxata service was changed from demand start to boot start.7040016384400-91873432398358118402229Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdsata service was changed from demand start to boot start.7040016384400-91873432398358118402228Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the ADP80XX service was changed from demand start to boot start.7040016384400-91873432398358118402227Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the 3ware service was changed from demand start to boot start.7040016384400-91873432398358118402226Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402225Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402224Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the stopped state.7036016384400-91873432398358118402223Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the stopped state.7036016384400-91873432398358118402222Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the running state.7036016384400-91873432398358118402221Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Setup log file was cleared.104041040-92233720368547758082220Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Application log file was cleared.104041040-92233720368547758082219Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The System log file was cleared.104041040-92233720368547758082218Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]