Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
Error 0x80070002 occurred while verifying known folder {FDD39AD0-238F-46AF-ADB4-6C85480369C7} with path 'C:\windows\system32\config\systemprofile\Documents'.	1002	0		3	0	0	-9223372036854775808	17	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1772	4112	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:43:31 PM			microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070003 occurred while verifying known folder {7B0DB17D-9CD2-4A93-9733-46CC89022E7C} with path 'C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms'.	1002	0		3	0	0	-9223372036854775808	16	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1388	2732	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:02:13 PM			microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {B97D20BB-F46A-4C97-BA10-5E3608430854} with path 'C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup'.	1002	0		3	0	0	-9223372036854775808	15	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	3528	3536	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:02:12 PM			microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {B97D20BB-F46A-4C97-BA10-5E3608430854} with path 'C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup'.	1002	0		3	0	0	-9223372036854775808	14	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	3172	3168	WIN-5T344G8GM1H	S-1-5-21-416071247-492812682-1642729393-500	1/16/2018 5:02:12 PM			microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {FDD39AD0-238F-46AF-ADB4-6C85480369C7} with path 'C:\windows\system32\config\systemprofile\Documents'.	1002	0		3	0	0	-9223372036854775808	13	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1164	2884	WIN-5T344G8GM1H	S-1-5-18	1/16/2018 5:02:05 PM			microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {352481E8-33BE-4251-BA85-6007CAEDCF9D} with path 'C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache'.	1002	0		3	0	0	-9223372036854775808	12	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1924	2184	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:37 PM	60e27e42-8f3f-0003-b57f-e2603f8fd301		microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {352481E8-33BE-4251-BA85-6007CAEDCF9D} with path 'C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache'.	1002	0		3	0	0	-9223372036854775808	11	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1924	2184	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:37 PM	60e27e42-8f3f-0003-b57f-e2603f8fd301		microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {352481E8-33BE-4251-BA85-6007CAEDCF9D} with path 'C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache'.	1002	0		3	0	0	-9223372036854775808	10	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1924	2184	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:37 PM	60e27e42-8f3f-0003-b57f-e2603f8fd301		microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {352481E8-33BE-4251-BA85-6007CAEDCF9D} with path 'C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache'.	1002	0		3	0	0	-9223372036854775808	9	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1924	2184	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:37 PM	60e27e42-8f3f-0003-b57f-e2603f8fd301		microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {352481E8-33BE-4251-BA85-6007CAEDCF9D} with path 'C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache'.	1002	0		3	0	0	-9223372036854775808	8	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1924	2184	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:37 PM	60e27e42-8f3f-0003-577f-e2603f8fd301		microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {352481E8-33BE-4251-BA85-6007CAEDCF9D} with path 'C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache'.	1002	0		3	0	0	-9223372036854775808	7	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1924	2184	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:37 PM	60e27e42-8f3f-0003-577f-e2603f8fd301		microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {352481E8-33BE-4251-BA85-6007CAEDCF9D} with path 'C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache'.	1002	0		3	0	0	-9223372036854775808	6	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1924	2184	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:37 PM	60e27e42-8f3f-0003-577f-e2603f8fd301		microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {352481E8-33BE-4251-BA85-6007CAEDCF9D} with path 'C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache'.	1002	0		3	0	0	-9223372036854775808	5	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1924	2184	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:36 PM			microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {FDD39AD0-238F-46AF-ADB4-6C85480369C7} with path 'C:\windows\system32\config\systemprofile\Documents'.	1002	0		3	0	0	-9223372036854775808	4	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1924	1944	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:36 PM	60e27e42-8f3f-0000-2180-e2603f8fd301		microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {FDD39AD0-238F-46AF-ADB4-6C85480369C7} with path 'C:\windows\system32\config\systemprofile\Documents'.	1002	0		3	0	0	-9223372036854775808	3	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1924	1944	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:36 PM	60e27e42-8f3f-0000-2180-e2603f8fd301		microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {FDD39AD0-238F-46AF-ADB4-6C85480369C7} with path 'C:\windows\system32\config\systemprofile\Documents'.	1002	0		3	0	0	-9223372036854775808	2	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	1924	1944	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:35 PM	60e27e42-8f3f-0000-2180-e2603f8fd301		microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Error 0x80070002 occurred while verifying known folder {FDD39AD0-238F-46AF-ADB4-6C85480369C7} with path 'C:\windows\system32\config\systemprofile\Documents'.	1002	0		3	0	0	-9223372036854775808	1	Microsoft-Windows-KnownFolders	8939299f-2315-4c5c-9b91-abb86aa0627d	Microsoft-Windows-Known Folders API Service	2172	2248	WIN-PD8DQPRRTAO	S-1-5-18	1/16/2018 5:01:20 PM			microsoft-windows-known folders api service	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]