MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403620Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045152n-h1-712140-11.cbci-712140-11.local8/28/2021 4:43:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403619Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045152n-h1-712140-11.cbci-712140-11.local8/28/2021 4:41:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403618Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045152n-h1-712140-11.cbci-712140-11.local8/28/2021 4:41:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 00243ED1-9923-4D61-B421-F80257EA2E53--1FCF36CD-22EB-4B3C-8EDA-F9391F11E1D2 (Friendly Name: c7165e86-3613-48b9-965a-914cb4eeb52b).2330400-92233720368547758083617Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58481080n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2375377-1298241827-49815988-13955835758/28/2021 4:40:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 00243ED1-9923-4D61-B421-F80257EA2E53--1FCF36CD-22EB-4B3C-8EDA-F9391F11E1D2 successfully disconnected from port .2340400-92233720368547758083616Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58481080n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2375377-1298241827-49815988-13955835758/28/2021 4:40:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 00243ED1-9923-4D61-B421-F80257EA2E53--1FCF36CD-22EB-4B3C-8EDA-F9391F11E1D2 (Friendly Name: c7165e86-3613-48b9-965a-914cb4eeb52b) successfully connected to port B0D09309-3D7C-44DC-AA14-91AF0C46F1AC (Friendly Name: c7165e86-3613-48b9-965a-914cb4eeb52b) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083615Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58482908n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2375377-1298241827-49815988-13955835758/28/2021 4:38:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 00243ED1-9923-4D61-B421-F80257EA2E53--1FCF36CD-22EB-4B3C-8EDA-F9391F11E1D2 (Friendly Name: ).2330400-92233720368547758083614Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58482908n-h1-712140-11.cbci-712140-11.local8/28/2021 4:38:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403613Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041100n-h1-712140-11.cbci-712140-11.local8/28/2021 4:38:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403612Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041100n-h1-712140-11.cbci-712140-11.local8/28/2021 4:32:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403611Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041100n-h1-712140-11.cbci-712140-11.local8/28/2021 4:32:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the stopped state.7036016384400-91873432398358118403610Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041100n-h1-712140-11.cbci-712140-11.local8/28/2021 4:26:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403609Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041100n-h1-712140-11.cbci-712140-11.local8/28/2021 4:23:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 64A62019-AA88-490A-A617-BA335D41E8B0--76E55BCD-5B63-4F1D-945F-7D7477D20AAD (Friendly Name: 3dabbed9-c290-48d4-85b8-8f7bd6bf6a85).2330400-92233720368547758083608Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20925140n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1688608793-1225435784-867833766-29680111018/28/2021 4:22:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 64A62019-AA88-490A-A617-BA335D41E8B0--76E55BCD-5B63-4F1D-945F-7D7477D20AAD successfully disconnected from port .2340400-92233720368547758083607Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20925140n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1688608793-1225435784-867833766-29680111018/28/2021 4:22:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-6A-1C-A2 has moved from port DC335BC6-E725-43B4-8055-D079B0F1EC21 (Friendly Name: 3dabbed9-c290-48d4-85b8-8f7bd6bf6a85) to port DC335BC6-E725-43B4-8055-D079B0F1EC21 (Friendly Name: 3dabbed9-c290-48d4-85b8-8f7bd6bf6a85).250410180-92233720368547758083606Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25404132n-h1-712140-11.cbci-712140-11.local8/28/2021 4:21:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-6A-1C-A2 has moved from port 7AAC756B-3343-4A88-B626-8725FDDBAFA8 (Friendly Name: br-data_External) to port DC335BC6-E725-43B4-8055-D079B0F1EC21 (Friendly Name: 3dabbed9-c290-48d4-85b8-8f7bd6bf6a85).250410180-92233720368547758083605Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25401848n-h1-712140-11.cbci-712140-11.local8/28/2021 4:21:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 64A62019-AA88-490A-A617-BA335D41E8B0--76E55BCD-5B63-4F1D-945F-7D7477D20AAD (Friendly Name: 3dabbed9-c290-48d4-85b8-8f7bd6bf6a85) successfully connected to port DC335BC6-E725-43B4-8055-D079B0F1EC21 (Friendly Name: 3dabbed9-c290-48d4-85b8-8f7bd6bf6a85) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083604Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20922372n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1688608793-1225435784-867833766-29680111018/28/2021 4:21:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403603Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045152n-h1-712140-11.cbci-712140-11.local8/28/2021 4:21:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 64A62019-AA88-490A-A617-BA335D41E8B0--76E55BCD-5B63-4F1D-945F-7D7477D20AAD (Friendly Name: ).2330400-92233720368547758083602Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20921096n-h1-712140-11.cbci-712140-11.local8/28/2021 4:21:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403601Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042296n-h1-712140-11.cbci-712140-11.local8/28/2021 4:14:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403600Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042296n-h1-712140-11.cbci-712140-11.local8/28/2021 4:13:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 74B25FAD-E6A8-490F-8642-38CB6FC97576--C1DF3CCA-596A-45BA-80DD-D17828AEA5F9 (Friendly Name: 16e3be11-12e1-4cfe-b1a6-e591a1e0b19f).2330400-92233720368547758083599Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61044620n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1957846957-1225778856-3409461894-19874307678/28/2021 4:12:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 74B25FAD-E6A8-490F-8642-38CB6FC97576--C1DF3CCA-596A-45BA-80DD-D17828AEA5F9 successfully disconnected from port .2340400-92233720368547758083598Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61044620n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1957846957-1225778856-3409461894-19874307678/28/2021 4:12:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 74B25FAD-E6A8-490F-8642-38CB6FC97576--C1DF3CCA-596A-45BA-80DD-D17828AEA5F9 (Friendly Name: 16e3be11-12e1-4cfe-b1a6-e591a1e0b19f) successfully connected to port 293813DE-42E3-46A5-8F51-E25CC460D2A5 (Friendly Name: 16e3be11-12e1-4cfe-b1a6-e591a1e0b19f) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083597Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61044992n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1957846957-1225778856-3409461894-19874307678/28/2021 4:12:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 74B25FAD-E6A8-490F-8642-38CB6FC97576--C1DF3CCA-596A-45BA-80DD-D17828AEA5F9 (Friendly Name: ).2330400-92233720368547758083596Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61044992n-h1-712140-11.cbci-712140-11.local8/28/2021 4:12:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 9B7360E7-40D6-49FD-BA97-0910851B6F33--2912169C-F697-4EA8-B54C-B3936251A6E0 (Friendly Name: e60817f1-809b-4c2f-95d7-249fcb033cf2).2330400-92233720368547758083595Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35885604n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2608029927-1241333974-269064122-8629195578/28/2021 4:11:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9B7360E7-40D6-49FD-BA97-0910851B6F33--2912169C-F697-4EA8-B54C-B3936251A6E0 successfully disconnected from port .2340400-92233720368547758083594Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35885604n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2608029927-1241333974-269064122-8629195578/28/2021 4:11:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-4D-E1-5D has moved from port 89554790-05E8-4B36-95A4-83E742B653FA (Friendly Name: e60817f1-809b-4c2f-95d7-249fcb033cf2) to port 89554790-05E8-4B36-95A4-83E742B653FA (Friendly Name: e60817f1-809b-4c2f-95d7-249fcb033cf2).250410180-92233720368547758083593Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25401848n-h1-712140-11.cbci-712140-11.local8/28/2021 4:11:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9B7360E7-40D6-49FD-BA97-0910851B6F33--2912169C-F697-4EA8-B54C-B3936251A6E0 (Friendly Name: e60817f1-809b-4c2f-95d7-249fcb033cf2) successfully connected to port 89554790-05E8-4B36-95A4-83E742B653FA (Friendly Name: e60817f1-809b-4c2f-95d7-249fcb033cf2) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083592Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35883536n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2608029927-1241333974-269064122-8629195578/28/2021 4:11:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403591Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 4:11:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 9B7360E7-40D6-49FD-BA97-0910851B6F33--2912169C-F697-4EA8-B54C-B3936251A6E0 (Friendly Name: ).2330400-92233720368547758083590Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35885604n-h1-712140-11.cbci-712140-11.local8/28/2021 4:11:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 9759A7F9-2798-4C93-A7E9-BE2AFB327FFD--7773ABEE-F21F-4513-ACA4-38FA9B1D00A1 (Friendly Name: e60817f1-809b-4c2f-95d7-249fcb033cf2).2330400-92233720368547758083589Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42924944n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2539235321-1284712344-717154727-42529717718/28/2021 4:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9759A7F9-2798-4C93-A7E9-BE2AFB327FFD--7773ABEE-F21F-4513-ACA4-38FA9B1D00A1 successfully disconnected from port .2340400-92233720368547758083588Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42924944n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2539235321-1284712344-717154727-42529717718/28/2021 4:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the running state.7036016384400-91873432398358118403587Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 4:10:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403586Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 4:10:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403585Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 4:09:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9759A7F9-2798-4C93-A7E9-BE2AFB327FFD--7773ABEE-F21F-4513-ACA4-38FA9B1D00A1 (Friendly Name: e60817f1-809b-4c2f-95d7-249fcb033cf2) successfully connected to port 18D588A5-22C0-4323-8FF7-7F7A3AAF34CC (Friendly Name: e60817f1-809b-4c2f-95d7-249fcb033cf2) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083584Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42925220n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2539235321-1284712344-717154727-42529717718/28/2021 4:09:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 9759A7F9-2798-4C93-A7E9-BE2AFB327FFD--7773ABEE-F21F-4513-ACA4-38FA9B1D00A1 (Friendly Name: ).2330400-92233720368547758083583Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42925220n-h1-712140-11.cbci-712140-11.local8/28/2021 4:09:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1B4847E4-A0B7-4F55-854D-4D447DFDB3F0--3455F9C0-702F-43B5-9F7C-DF0A44F74C60 (Friendly Name: 0fc63666-6b3e-480f-b2eb-ae57d03d7a28).2330400-92233720368547758083582Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47401552n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-457721828-1331011767-1145916805-40383276778/28/2021 4:08:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1B4847E4-A0B7-4F55-854D-4D447DFDB3F0--3455F9C0-702F-43B5-9F7C-DF0A44F74C60 successfully disconnected from port .2340400-92233720368547758083581Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47401552n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-457721828-1331011767-1145916805-40383276778/28/2021 4:08:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-C6-20-E9 has moved from port 7AAC756B-3343-4A88-B626-8725FDDBAFA8 (Friendly Name: br-data_External) to port 36C2BCEE-7737-473C-B88F-C5E3835008B1 (Friendly Name: 0fc63666-6b3e-480f-b2eb-ae57d03d7a28).250410180-92233720368547758083580Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25402804n-h1-712140-11.cbci-712140-11.local8/28/2021 4:08:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1B4847E4-A0B7-4F55-854D-4D447DFDB3F0--3455F9C0-702F-43B5-9F7C-DF0A44F74C60 (Friendly Name: 0fc63666-6b3e-480f-b2eb-ae57d03d7a28) successfully connected to port 36C2BCEE-7737-473C-B88F-C5E3835008B1 (Friendly Name: 0fc63666-6b3e-480f-b2eb-ae57d03d7a28) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083579Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47404284n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-457721828-1331011767-1145916805-40383276778/28/2021 4:08:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403578Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 4:08:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1B4847E4-A0B7-4F55-854D-4D447DFDB3F0--3455F9C0-702F-43B5-9F7C-DF0A44F74C60 (Friendly Name: ).2330400-92233720368547758083577Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47401552n-h1-712140-11.cbci-712140-11.local8/28/2021 4:08:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403576Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 4:08:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the stopped state.7036016384400-91873432398358118403575Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h1-712140-11.cbci-712140-11.local8/28/2021 4:07:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 60A9EA4D-E6AA-4A74-8CC3-4E1F14BCBBCD--6FDA5877-1EEA-4F9B-9A31-679647DA407B (Friendly Name: d0ee1c48-56e5-44be-9443-1f8e03eeb370).2330400-92233720368547758083574Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41841544n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1621748301-1249175210-525255564-34516326608/28/2021 4:06:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 60A9EA4D-E6AA-4A74-8CC3-4E1F14BCBBCD--6FDA5877-1EEA-4F9B-9A31-679647DA407B successfully disconnected from port .2340400-92233720368547758083573Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41841544n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1621748301-1249175210-525255564-34516326608/28/2021 4:06:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 60A9EA4D-E6AA-4A74-8CC3-4E1F14BCBBCD--6FDA5877-1EEA-4F9B-9A31-679647DA407B (Friendly Name: d0ee1c48-56e5-44be-9443-1f8e03eeb370) successfully connected to port 8D6A0F6A-D7B4-4950-90F0-B8644DF968D5 (Friendly Name: d0ee1c48-56e5-44be-9443-1f8e03eeb370) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083572Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41842456n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1621748301-1249175210-525255564-34516326608/28/2021 4:06:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 60A9EA4D-E6AA-4A74-8CC3-4E1F14BCBBCD--6FDA5877-1EEA-4F9B-9A31-679647DA407B (Friendly Name: ).2330400-92233720368547758083571Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41842456n-h1-712140-11.cbci-712140-11.local8/28/2021 4:06:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 14A45724-4865-427E-B224-1C837AA4D404--48E0373E-315F-421C-8C7C-2728BDB68E8A (Friendly Name: d5b7eca0-d30d-4852-abd5-86e455e0b07b).2330400-92233720368547758083570Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50284256n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-346314532-1115572325-2199659698-810446028/28/2021 4:04:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14A45724-4865-427E-B224-1C837AA4D404--48E0373E-315F-421C-8C7C-2728BDB68E8A successfully disconnected from port .2340400-92233720368547758083569Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50284256n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-346314532-1115572325-2199659698-810446028/28/2021 4:04:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-62-D4-B7 has moved from port 127F88A9-CC48-4AEE-ACE6-47156FD1748F (Friendly Name: d5b7eca0-d30d-4852-abd5-86e455e0b07b) to port 127F88A9-CC48-4AEE-ACE6-47156FD1748F (Friendly Name: d5b7eca0-d30d-4852-abd5-86e455e0b07b).250410180-92233720368547758083568Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25402804n-h1-712140-11.cbci-712140-11.local8/28/2021 4:03:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-62-D4-B7 has moved from port 7AAC756B-3343-4A88-B626-8725FDDBAFA8 (Friendly Name: br-data_External) to port 127F88A9-CC48-4AEE-ACE6-47156FD1748F (Friendly Name: d5b7eca0-d30d-4852-abd5-86e455e0b07b).250410180-92233720368547758083567Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25402804n-h1-712140-11.cbci-712140-11.local8/28/2021 4:03:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 14A45724-4865-427E-B224-1C837AA4D404--48E0373E-315F-421C-8C7C-2728BDB68E8A (Friendly Name: d5b7eca0-d30d-4852-abd5-86e455e0b07b) successfully connected to port 127F88A9-CC48-4AEE-ACE6-47156FD1748F (Friendly Name: d5b7eca0-d30d-4852-abd5-86e455e0b07b) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083566Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50285076n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-346314532-1115572325-2199659698-810446028/28/2021 4:03:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 14A45724-4865-427E-B224-1C837AA4D404--48E0373E-315F-421C-8C7C-2728BDB68E8A (Friendly Name: ).2330400-92233720368547758083565Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50285508n-h1-712140-11.cbci-712140-11.local8/28/2021 4:03:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403564Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 4:02:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403563Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 4:02:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 955247FE-724E-4257-9F81-38A017CA5C5B--DF06C745-3F4D-42D2-A224-089246BC33BB (Friendly Name: 3b7f6437-2970-49cd-8b69-0b98c0048288).2330400-92233720368547758083562Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50645440n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2505197566-1113027150-2688057759-15328077038/28/2021 4:01:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 955247FE-724E-4257-9F81-38A017CA5C5B--DF06C745-3F4D-42D2-A224-089246BC33BB successfully disconnected from port .2340400-92233720368547758083561Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50645440n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2505197566-1113027150-2688057759-15328077038/28/2021 4:01:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-75-3D-7D has moved from port 1EF0D677-5DF7-4053-BE96-68DE81DC5192 (Friendly Name: 3b7f6437-2970-49cd-8b69-0b98c0048288) to port 1EF0D677-5DF7-4053-BE96-68DE81DC5192 (Friendly Name: 3b7f6437-2970-49cd-8b69-0b98c0048288).250410180-92233720368547758083560Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25402804n-h1-712140-11.cbci-712140-11.local8/28/2021 4:01:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-75-3D-7D has moved from port 7AAC756B-3343-4A88-B626-8725FDDBAFA8 (Friendly Name: br-data_External) to port 1EF0D677-5DF7-4053-BE96-68DE81DC5192 (Friendly Name: 3b7f6437-2970-49cd-8b69-0b98c0048288).250410180-92233720368547758083559Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25404128n-h1-712140-11.cbci-712140-11.local8/28/2021 4:01:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 955247FE-724E-4257-9F81-38A017CA5C5B--DF06C745-3F4D-42D2-A224-089246BC33BB (Friendly Name: 3b7f6437-2970-49cd-8b69-0b98c0048288) successfully connected to port 1EF0D677-5DF7-4053-BE96-68DE81DC5192 (Friendly Name: 3b7f6437-2970-49cd-8b69-0b98c0048288) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083558Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50645432n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2505197566-1113027150-2688057759-15328077038/28/2021 4:01:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 955247FE-724E-4257-9F81-38A017CA5C5B--DF06C745-3F4D-42D2-A224-089246BC33BB (Friendly Name: ).2330400-92233720368547758083557Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50645440n-h1-712140-11.cbci-712140-11.local8/28/2021 4:01:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D9DB9E65-A139-4B28-973F-C50A353C47CC--2F695E3B-9375-4029-AE93-9C28A66C6DFA (Friendly Name: f54bcefa-642c-40f1-b46d-629b5207c8e3).2330400-92233720368547758083556Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem15925632n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3655048805-1260953913-180699031-34272205338/28/2021 4:00:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D9DB9E65-A139-4B28-973F-C50A353C47CC--2F695E3B-9375-4029-AE93-9C28A66C6DFA successfully disconnected from port .2340400-92233720368547758083555Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem15925632n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3655048805-1260953913-180699031-34272205338/28/2021 4:00:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D9DB9E65-A139-4B28-973F-C50A353C47CC--2F695E3B-9375-4029-AE93-9C28A66C6DFA (Friendly Name: f54bcefa-642c-40f1-b46d-629b5207c8e3) successfully connected to port 0A5A73B7-7090-4802-A064-329FD734DF1E (Friendly Name: f54bcefa-642c-40f1-b46d-629b5207c8e3) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083554Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem15925632n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3655048805-1260953913-180699031-34272205338/28/2021 4:00:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D9DB9E65-A139-4B28-973F-C50A353C47CC--2F695E3B-9375-4029-AE93-9C28A66C6DFA (Friendly Name: ).2330400-92233720368547758083553Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem15925632n-h1-712140-11.cbci-712140-11.local8/28/2021 4:00:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 9D57939D-0461-47F0-ABD6-95BAEE494F1B--C3D69F26-FB21-4FB4-BC3F-30F3F76A7EA9 (Friendly Name: 6650deb5-bf71-4d8d-99ee-83e93798f5a1).2330400-92233720368547758083552Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54881868n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2639762333-1206912097-3130381995-4581811028/28/2021 3:59:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9D57939D-0461-47F0-ABD6-95BAEE494F1B--C3D69F26-FB21-4FB4-BC3F-30F3F76A7EA9 successfully disconnected from port .2340400-92233720368547758083551Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54881868n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2639762333-1206912097-3130381995-4581811028/28/2021 3:59:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-F2-BA-28 has moved from port DA50FC73-2F00-4B66-AC52-B8BEC8F21D33 (Friendly Name: 6650deb5-bf71-4d8d-99ee-83e93798f5a1) to port DA50FC73-2F00-4B66-AC52-B8BEC8F21D33 (Friendly Name: 6650deb5-bf71-4d8d-99ee-83e93798f5a1).250410180-92233720368547758083550Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25403368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:59:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-F2-BA-28 has moved from port 7AAC756B-3343-4A88-B626-8725FDDBAFA8 (Friendly Name: br-data_External) to port DA50FC73-2F00-4B66-AC52-B8BEC8F21D33 (Friendly Name: 6650deb5-bf71-4d8d-99ee-83e93798f5a1).250410180-92233720368547758083549Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25403368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:59:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9D57939D-0461-47F0-ABD6-95BAEE494F1B--C3D69F26-FB21-4FB4-BC3F-30F3F76A7EA9 (Friendly Name: 6650deb5-bf71-4d8d-99ee-83e93798f5a1) successfully connected to port DA50FC73-2F00-4B66-AC52-B8BEC8F21D33 (Friendly Name: 6650deb5-bf71-4d8d-99ee-83e93798f5a1) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083548Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54881836n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2639762333-1206912097-3130381995-4581811028/28/2021 3:59:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 9D57939D-0461-47F0-ABD6-95BAEE494F1B--C3D69F26-FB21-4FB4-BC3F-30F3F76A7EA9 (Friendly Name: ).2330400-92233720368547758083547Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54881868n-h1-712140-11.cbci-712140-11.local8/28/2021 3:59:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 76CE0F88-29EE-467C-A75C-FE86A41DC34F--F8519763-2DFA-4D86-8CEC-1700590348AA (Friendly Name: be0538f0-8572-4ac8-8ba1-99349b7b6896).2330400-92233720368547758083546Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46404732n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1993215880-1182542318-2264816807-13381871728/28/2021 3:58:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 76CE0F88-29EE-467C-A75C-FE86A41DC34F--F8519763-2DFA-4D86-8CEC-1700590348AA successfully disconnected from port .2340400-92233720368547758083545Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46404732n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1993215880-1182542318-2264816807-13381871728/28/2021 3:58:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 76CE0F88-29EE-467C-A75C-FE86A41DC34F--F8519763-2DFA-4D86-8CEC-1700590348AA (Friendly Name: be0538f0-8572-4ac8-8ba1-99349b7b6896) successfully connected to port B82BA036-C87D-4650-A47B-0021971EC808 (Friendly Name: be0538f0-8572-4ac8-8ba1-99349b7b6896) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083544Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46404404n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1993215880-1182542318-2264816807-13381871728/28/2021 3:58:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 76CE0F88-29EE-467C-A75C-FE86A41DC34F--F8519763-2DFA-4D86-8CEC-1700590348AA (Friendly Name: ).2330400-92233720368547758083543Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46404404n-h1-712140-11.cbci-712140-11.local8/28/2021 3:58:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403542Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:58:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 39B9B3F0-4280-4DCA-8E5B-01CCFA2132F4--F0DDFF0E-73E9-4C75-91E3-02F7BA72ED33 (Friendly Name: 4b039fd4-7913-4953-8302-bec402cd771c).2330400-92233720368547758083541Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47685832n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-968471536-1305100928-3422641038-40969262028/28/2021 3:57:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 39B9B3F0-4280-4DCA-8E5B-01CCFA2132F4--F0DDFF0E-73E9-4C75-91E3-02F7BA72ED33 successfully disconnected from port .2340400-92233720368547758083540Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47685832n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-968471536-1305100928-3422641038-40969262028/28/2021 3:57:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403539Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:55:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 592CA276-0F00-4C90-9121-7DCADFD84282--904CA782-1E67-454A-AA80-CD7B973DDC20 (Friendly Name: 8839d0f6-4fd1-4f53-824b-071d87cf9f4b).2330400-92233720368547758083538Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51885048n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1496097398-1284509440-3397198225-21854189758/28/2021 3:54:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 592CA276-0F00-4C90-9121-7DCADFD84282--904CA782-1E67-454A-AA80-CD7B973DDC20 successfully disconnected from port .2340400-92233720368547758083537Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51885048n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1496097398-1284509440-3397198225-21854189758/28/2021 3:54:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403536Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041100n-h1-712140-11.cbci-712140-11.local8/28/2021 3:54:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118403535Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041100n-h1-712140-11.cbci-712140-11.local8/28/2021 3:54:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 592CA276-0F00-4C90-9121-7DCADFD84282--904CA782-1E67-454A-AA80-CD7B973DDC20 (Friendly Name: 8839d0f6-4fd1-4f53-824b-071d87cf9f4b) successfully connected to port 84089121-564E-4423-B486-64E8F54D6960 (Friendly Name: 8839d0f6-4fd1-4f53-824b-071d87cf9f4b) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083534Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5188840n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1496097398-1284509440-3397198225-21854189758/28/2021 3:52:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 592CA276-0F00-4C90-9121-7DCADFD84282--904CA782-1E67-454A-AA80-CD7B973DDC20 (Friendly Name: ).2330400-92233720368547758083533Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5188840n-h1-712140-11.cbci-712140-11.local8/28/2021 3:52:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403532Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:52:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 39B9B3F0-4280-4DCA-8E5B-01CCFA2132F4--F0DDFF0E-73E9-4C75-91E3-02F7BA72ED33 (Friendly Name: 4b039fd4-7913-4953-8302-bec402cd771c) successfully connected to port A231839D-DF8C-492E-9930-660CD91D0172 (Friendly Name: 4b039fd4-7913-4953-8302-bec402cd771c) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083531Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47685832n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-968471536-1305100928-3422641038-40969262028/28/2021 3:52:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 39B9B3F0-4280-4DCA-8E5B-01CCFA2132F4--F0DDFF0E-73E9-4C75-91E3-02F7BA72ED33 (Friendly Name: ).2330400-92233720368547758083530Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47685832n-h1-712140-11.cbci-712140-11.local8/28/2021 3:52:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403529Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:52:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C1E588D9-F8E8-484C-B6E6-2DCF4636CD00--2273987A-2E82-4BE4-B501-9C5F685883AE (Friendly Name: d632113d-4349-4b31-81a7-3061be33419d).2330400-92233720368547758083528Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61246112n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3253045465-1213004008-3475891894-134487748/28/2021 3:49:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C1E588D9-F8E8-484C-B6E6-2DCF4636CD00--2273987A-2E82-4BE4-B501-9C5F685883AE successfully disconnected from port .2340400-92233720368547758083527Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61246112n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3253045465-1213004008-3475891894-134487748/28/2021 3:49:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403526Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:49:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403525Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:48:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403524Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:46:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C1E588D9-F8E8-484C-B6E6-2DCF4636CD00--2273987A-2E82-4BE4-B501-9C5F685883AE (Friendly Name: d632113d-4349-4b31-81a7-3061be33419d) successfully connected to port 9C589C73-154A-484B-9874-488D668F9210 (Friendly Name: d632113d-4349-4b31-81a7-3061be33419d) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083523Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61246112n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3253045465-1213004008-3475891894-134487748/28/2021 3:46:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C1E588D9-F8E8-484C-B6E6-2DCF4636CD00--2273987A-2E82-4BE4-B501-9C5F685883AE (Friendly Name: ).2330400-92233720368547758083522Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61246112n-h1-712140-11.cbci-712140-11.local8/28/2021 3:46:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403521Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:46:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403520Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:46:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403519Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:46:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F9760DEE-A978-4774-8FF9-B639F9DF830F--A1658BD5-819B-44EB-B26F-F1C82FC1730E (Friendly Name: 3822ef7b-e334-4ce5-9bbd-0da1a8c0542b).2330400-92233720368547758083518Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60123144n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4185263598-1198827896-968292751-2603007938/28/2021 3:45:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F9760DEE-A978-4774-8FF9-B639F9DF830F--A1658BD5-819B-44EB-B26F-F1C82FC1730E successfully disconnected from port .2340400-92233720368547758083517Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60123144n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4185263598-1198827896-968292751-2603007938/28/2021 3:45:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403516Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:45:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403515Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:45:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7F71F21B-5C14-40F6-BB7F-F770A436D5F5--8223F789-22AD-4779-B932-D378FE420521 (Friendly Name: acc3510d-73fe-49fe-999a-7cb3ca2ad24e).2330400-92233720368547758083514Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37043420n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2138173979-1089887252-1895268283-41243910768/28/2021 3:45:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7F71F21B-5C14-40F6-BB7F-F770A436D5F5--8223F789-22AD-4779-B932-D378FE420521 successfully disconnected from port .2340400-92233720368547758083513Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37043420n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2138173979-1089887252-1895268283-41243910768/28/2021 3:45:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F9760DEE-A978-4774-8FF9-B639F9DF830F--A1658BD5-819B-44EB-B26F-F1C82FC1730E (Friendly Name: 3822ef7b-e334-4ce5-9bbd-0da1a8c0542b) successfully connected to port 2A9F689D-F8A4-489E-9781-DF681B160C4E (Friendly Name: 3822ef7b-e334-4ce5-9bbd-0da1a8c0542b) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083512Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60125816n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4185263598-1198827896-968292751-2603007938/28/2021 3:43:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F9760DEE-A978-4774-8FF9-B639F9DF830F--A1658BD5-819B-44EB-B26F-F1C82FC1730E (Friendly Name: ).2330400-92233720368547758083511Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60125816n-h1-712140-11.cbci-712140-11.local8/28/2021 3:43:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403510Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:43:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the running state.7036016384400-91873432398358118403509Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:43:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403508Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:43:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 16AFE1E4-1003-4FCC-B2A5-6417D0240A53--9FE7D83F-C43A-441F-88C4-ABB321E2EDC3 (Friendly Name: 05a83e24-c657-4b15-9212-1f6b7a8120a0).2330400-92233720368547758083507Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53205540n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-380625380-1338773507-392471986-13931737128/28/2021 3:43:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 16AFE1E4-1003-4FCC-B2A5-6417D0240A53--9FE7D83F-C43A-441F-88C4-ABB321E2EDC3 successfully disconnected from port .2340400-92233720368547758083506Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53205540n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-380625380-1338773507-392471986-13931737128/28/2021 3:43:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7F71F21B-5C14-40F6-BB7F-F770A436D5F5--8223F789-22AD-4779-B932-D378FE420521 (Friendly Name: acc3510d-73fe-49fe-999a-7cb3ca2ad24e) successfully connected to port 41583833-3DF9-4B3B-AA22-DC3309A5B3C0 (Friendly Name: acc3510d-73fe-49fe-999a-7cb3ca2ad24e) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083505Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37042972n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2138173979-1089887252-1895268283-41243910768/28/2021 3:43:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7F71F21B-5C14-40F6-BB7F-F770A436D5F5--8223F789-22AD-4779-B932-D378FE420521 (Friendly Name: ).2330400-92233720368547758083504Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37042972n-h1-712140-11.cbci-712140-11.local8/28/2021 3:43:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 16AFE1E4-1003-4FCC-B2A5-6417D0240A53--9FE7D83F-C43A-441F-88C4-ABB321E2EDC3 (Friendly Name: 05a83e24-c657-4b15-9212-1f6b7a8120a0) successfully connected to port 56F11F25-8C80-438F-9125-B13D23DC3D1C (Friendly Name: 05a83e24-c657-4b15-9212-1f6b7a8120a0) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083503Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53205540n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-380625380-1338773507-392471986-13931737128/28/2021 3:43:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 16AFE1E4-1003-4FCC-B2A5-6417D0240A53--9FE7D83F-C43A-441F-88C4-ABB321E2EDC3 (Friendly Name: ).2330400-92233720368547758083502Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53205540n-h1-712140-11.cbci-712140-11.local8/28/2021 3:43:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D5692A0E-682E-4E71-9710-0FE12C4A70CE--6BA59D56-CC16-4D1B-828A-0FC16C3330C6 (Friendly Name: 223d51f4-acd1-4cbb-a704-537091a80e95).2330400-92233720368547758083501Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41445160n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3580439054-1316055086-3775860887-34634655168/28/2021 3:42:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D5692A0E-682E-4E71-9710-0FE12C4A70CE--6BA59D56-CC16-4D1B-828A-0FC16C3330C6 successfully disconnected from port .2340400-92233720368547758083500Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41445160n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3580439054-1316055086-3775860887-34634655168/28/2021 3:42:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D5692A0E-682E-4E71-9710-0FE12C4A70CE--6BA59D56-CC16-4D1B-828A-0FC16C3330C6 (Friendly Name: 223d51f4-acd1-4cbb-a704-537091a80e95) successfully connected to port 96EE596E-123C-4B5C-9CF1-911EA5E26CBF (Friendly Name: 223d51f4-acd1-4cbb-a704-537091a80e95) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083499Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41445812n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3580439054-1316055086-3775860887-34634655168/28/2021 3:42:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D5692A0E-682E-4E71-9710-0FE12C4A70CE--6BA59D56-CC16-4D1B-828A-0FC16C3330C6 (Friendly Name: ).2330400-92233720368547758083498Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41445812n-h1-712140-11.cbci-712140-11.local8/28/2021 3:42:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F9B3D2DD-00C0-4F3A-B4E0-E42FFD9CC9A5--CBAC3BFB-3614-4FBB-B5FB-FA3C5D710BB3 (Friendly Name: 2abad617-ac2c-44c8-b7e0-f8b63c07a998).2330400-92233720368547758083497Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43043608n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4189311709-1329201344-803528884-27814535658/28/2021 3:41:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F9B3D2DD-00C0-4F3A-B4E0-E42FFD9CC9A5--CBAC3BFB-3614-4FBB-B5FB-FA3C5D710BB3 successfully disconnected from port .2340400-92233720368547758083496Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43043608n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4189311709-1329201344-803528884-27814535658/28/2021 3:41:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3DEDDFA9-D757-4755-9E17-4A6B9819ED38--A4753D63-CDD2-4269-9483-E43BAACDCEC4 (Friendly Name: 99eeed85-cbe5-4ec1-a0cd-e33adee3f4ec).2330400-92233720368547758083495Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5925420n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1038999465-1196808023-1800017822-9550626808/28/2021 3:41:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3DEDDFA9-D757-4755-9E17-4A6B9819ED38--A4753D63-CDD2-4269-9483-E43BAACDCEC4 successfully disconnected from port .2340400-92233720368547758083494Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5925420n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1038999465-1196808023-1800017822-9550626808/28/2021 3:41:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6C8C77BE-8BC6-4981-88F1-280EAA33BC0C--67F94105-D9E1-4A5C-9BA1-45CF9B6579E9 (Friendly Name: a18c7478-2a8f-4e62-b121-7b1710e4a012).2330400-92233720368547758083493Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem15482108n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1821145022-1233226694-237564296-2136605868/28/2021 3:41:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6C8C77BE-8BC6-4981-88F1-280EAA33BC0C--67F94105-D9E1-4A5C-9BA1-45CF9B6579E9 successfully disconnected from port .2340400-92233720368547758083492Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem15482108n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1821145022-1233226694-237564296-2136605868/28/2021 3:41:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6C8C77BE-8BC6-4981-88F1-280EAA33BC0C--67F94105-D9E1-4A5C-9BA1-45CF9B6579E9 (Friendly Name: a18c7478-2a8f-4e62-b121-7b1710e4a012) successfully connected to port 961E80C6-8669-49C5-AB78-3814338EFB6F (Friendly Name: a18c7478-2a8f-4e62-b121-7b1710e4a012) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083491Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem15485308n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1821145022-1233226694-237564296-2136605868/28/2021 3:40:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6C8C77BE-8BC6-4981-88F1-280EAA33BC0C--67F94105-D9E1-4A5C-9BA1-45CF9B6579E9 (Friendly Name: ).2330400-92233720368547758083490Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem15485308n-h1-712140-11.cbci-712140-11.local8/28/2021 3:40:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403489Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:40:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3DEDDFA9-D757-4755-9E17-4A6B9819ED38--A4753D63-CDD2-4269-9483-E43BAACDCEC4 (Friendly Name: 99eeed85-cbe5-4ec1-a0cd-e33adee3f4ec) successfully connected to port 3E2AA8C0-BC15-42E2-9FF2-B80B134904C8 (Friendly Name: 99eeed85-cbe5-4ec1-a0cd-e33adee3f4ec) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083488Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5923088n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1038999465-1196808023-1800017822-9550626808/28/2021 3:39:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3DEDDFA9-D757-4755-9E17-4A6B9819ED38--A4753D63-CDD2-4269-9483-E43BAACDCEC4 (Friendly Name: ).2330400-92233720368547758083487Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5923088n-h1-712140-11.cbci-712140-11.local8/28/2021 3:39:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F9B3D2DD-00C0-4F3A-B4E0-E42FFD9CC9A5--CBAC3BFB-3614-4FBB-B5FB-FA3C5D710BB3 (Friendly Name: 2abad617-ac2c-44c8-b7e0-f8b63c07a998) successfully connected to port 204FA58C-4D85-4435-B6D0-1CDAF0DC8B5D (Friendly Name: 2abad617-ac2c-44c8-b7e0-f8b63c07a998) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083486Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43043608n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4189311709-1329201344-803528884-27814535658/28/2021 3:39:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F9B3D2DD-00C0-4F3A-B4E0-E42FFD9CC9A5--CBAC3BFB-3614-4FBB-B5FB-FA3C5D710BB3 (Friendly Name: ).2330400-92233720368547758083485Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43043608n-h1-712140-11.cbci-712140-11.local8/28/2021 3:39:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403484Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:38:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C7E138FD-4269-443E-ABCC-80E65F0FFA44--173B3385-6F39-4CCC-834B-B83981521811 (Friendly Name: 9396ac72-f176-48d7-b4ff-5d1962b793e4).2330400-92233720368547758083483Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem922552n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3353426173-1144930921-3867200683-11572386238/28/2021 3:37:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C7E138FD-4269-443E-ABCC-80E65F0FFA44--173B3385-6F39-4CCC-834B-B83981521811 successfully disconnected from port .2340400-92233720368547758083482Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem922552n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3353426173-1144930921-3867200683-11572386238/28/2021 3:37:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C7E138FD-4269-443E-ABCC-80E65F0FFA44--173B3385-6F39-4CCC-834B-B83981521811 (Friendly Name: 9396ac72-f176-48d7-b4ff-5d1962b793e4) successfully connected to port E19EA7C6-CAF9-4465-B97E-669C66CA0B9C (Friendly Name: 9396ac72-f176-48d7-b4ff-5d1962b793e4) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083481Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem926116n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3353426173-1144930921-3867200683-11572386238/28/2021 3:37:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C7E138FD-4269-443E-ABCC-80E65F0FFA44--173B3385-6F39-4CCC-834B-B83981521811 (Friendly Name: ).2330400-92233720368547758083480Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem926116n-h1-712140-11.cbci-712140-11.local8/28/2021 3:37:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C7E138FD-4269-443E-ABCC-80E65F0FFA44--173B3385-6F39-4CCC-834B-B83981521811 (Friendly Name: 9396ac72-f176-48d7-b4ff-5d1962b793e4).2330400-92233720368547758083479Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5140828n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3353426173-1144930921-3867200683-11572386238/28/2021 3:37:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C7E138FD-4269-443E-ABCC-80E65F0FFA44--173B3385-6F39-4CCC-834B-B83981521811 successfully disconnected from port .2340400-92233720368547758083478Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5140828n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3353426173-1144930921-3867200683-11572386238/28/2021 3:37:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C7E138FD-4269-443E-ABCC-80E65F0FFA44--173B3385-6F39-4CCC-834B-B83981521811 (Friendly Name: 9396ac72-f176-48d7-b4ff-5d1962b793e4) successfully connected to port E19EA7C6-CAF9-4465-B97E-669C66CA0B9C (Friendly Name: 9396ac72-f176-48d7-b4ff-5d1962b793e4) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083477Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51404636n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3353426173-1144930921-3867200683-11572386238/28/2021 3:37:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C7E138FD-4269-443E-ABCC-80E65F0FFA44--173B3385-6F39-4CCC-834B-B83981521811 (Friendly Name: ).2330400-92233720368547758083476Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51404636n-h1-712140-11.cbci-712140-11.local8/28/2021 3:37:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C7E138FD-4269-443E-ABCC-80E65F0FFA44--173B3385-6F39-4CCC-834B-B83981521811 (Friendly Name: 9396ac72-f176-48d7-b4ff-5d1962b793e4).2330400-92233720368547758083475Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5536916n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3353426173-1144930921-3867200683-11572386238/28/2021 3:37:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C7E138FD-4269-443E-ABCC-80E65F0FFA44--173B3385-6F39-4CCC-834B-B83981521811 successfully disconnected from port .2340400-92233720368547758083474Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5536916n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3353426173-1144930921-3867200683-11572386238/28/2021 3:37:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0ABD3AB9-7833-489A-971D-CFEE607C0503--B265E105-82D0-4016-AA54-46E83FE0DE92 (Friendly Name: 70ba8faf-3c2d-4e20-829a-d04796bf6fcc).2330400-92233720368547758083473Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21125780n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-180173497-1218082867-4006550935-506911688/28/2021 3:37:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0ABD3AB9-7833-489A-971D-CFEE607C0503--B265E105-82D0-4016-AA54-46E83FE0DE92 successfully disconnected from port .2340400-92233720368547758083472Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21125780n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-180173497-1218082867-4006550935-506911688/28/2021 3:37:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C7E138FD-4269-443E-ABCC-80E65F0FFA44--173B3385-6F39-4CCC-834B-B83981521811 (Friendly Name: 9396ac72-f176-48d7-b4ff-5d1962b793e4) successfully connected to port E19EA7C6-CAF9-4465-B97E-669C66CA0B9C (Friendly Name: 9396ac72-f176-48d7-b4ff-5d1962b793e4) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083471Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55365188n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3353426173-1144930921-3867200683-11572386238/28/2021 3:37:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C7E138FD-4269-443E-ABCC-80E65F0FFA44--173B3385-6F39-4CCC-834B-B83981521811 (Friendly Name: ).2330400-92233720368547758083470Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55365188n-h1-712140-11.cbci-712140-11.local8/28/2021 3:37:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 31C2D5B9-C41D-452A-AA04-6002FBBE4923--F5543755-2077-407D-BC22-A36CDAB464F2 (Friendly Name: d07bbb97-f821-4ac6-8ae6-d249516c1aef).2330400-92233720368547758083469Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5243440n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-834852281-1160430621-39847082-5920355798/28/2021 3:37:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 31C2D5B9-C41D-452A-AA04-6002FBBE4923--F5543755-2077-407D-BC22-A36CDAB464F2 successfully disconnected from port .2340400-92233720368547758083468Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5243440n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-834852281-1160430621-39847082-5920355798/28/2021 3:37:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C88BE27C-B7F0-4841-BDC2-92C010E1006B--04B031FA-56E6-4CE3-AD8A-C3014FC3BC6D (Friendly Name: 7fff83a7-7d99-498a-becd-9e592cb1be39).2330400-92233720368547758083467Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51646124n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3364610684-1212266480-3230843581-17952197288/28/2021 3:36:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C88BE27C-B7F0-4841-BDC2-92C010E1006B--04B031FA-56E6-4CE3-AD8A-C3014FC3BC6D successfully disconnected from port .2340400-92233720368547758083466Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51646124n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3364610684-1212266480-3230843581-17952197288/28/2021 3:36:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C88BE27C-B7F0-4841-BDC2-92C010E1006B--04B031FA-56E6-4CE3-AD8A-C3014FC3BC6D (Friendly Name: 7fff83a7-7d99-498a-becd-9e592cb1be39) successfully connected to port 21F9D91F-5D94-4620-BF36-7A08501C1243 (Friendly Name: 7fff83a7-7d99-498a-becd-9e592cb1be39) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083465Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51644348n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3364610684-1212266480-3230843581-17952197288/28/2021 3:36:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C88BE27C-B7F0-4841-BDC2-92C010E1006B--04B031FA-56E6-4CE3-AD8A-C3014FC3BC6D (Friendly Name: ).2330400-92233720368547758083464Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51644348n-h1-712140-11.cbci-712140-11.local8/28/2021 3:36:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 31C2D5B9-C41D-452A-AA04-6002FBBE4923--F5543755-2077-407D-BC22-A36CDAB464F2 (Friendly Name: d07bbb97-f821-4ac6-8ae6-d249516c1aef) successfully connected to port 930C7F18-EE8A-49BD-AA9F-9D4DBDF48D23 (Friendly Name: d07bbb97-f821-4ac6-8ae6-d249516c1aef) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083463Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5241820n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-834852281-1160430621-39847082-5920355798/28/2021 3:36:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 31C2D5B9-C41D-452A-AA04-6002FBBE4923--F5543755-2077-407D-BC22-A36CDAB464F2 (Friendly Name: ).2330400-92233720368547758083462Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5241820n-h1-712140-11.cbci-712140-11.local8/28/2021 3:36:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B05AF015-AFF9-4C8A-A122-A9CB2D60646A--D27B8C07-D421-4A28-A71E-BB814F52F24E (Friendly Name: bb834a85-c872-4038-b7af-a0af1409fea6).2330400-92233720368547758083461Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39564580n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2958749717-1284157433-3416859297-17849631178/28/2021 3:35:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B05AF015-AFF9-4C8A-A122-A9CB2D60646A--D27B8C07-D421-4A28-A71E-BB814F52F24E successfully disconnected from port .2340400-92233720368547758083460Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39564580n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2958749717-1284157433-3416859297-17849631178/28/2021 3:35:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5185BC13-C9E1-4103-8449-FC23579A53D1--312D9895-3696-4E7F-B089-80B1D0C25C26 (Friendly Name: 2e3e6efc-c126-4b1d-a149-7ea2ce66a505).2330400-92233720368547758083459Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56083100n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1367718931-1090767329-603736452-35119171438/28/2021 3:35:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5185BC13-C9E1-4103-8449-FC23579A53D1--312D9895-3696-4E7F-B089-80B1D0C25C26 successfully disconnected from port .2340400-92233720368547758083458Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56083100n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1367718931-1090767329-603736452-35119171438/28/2021 3:35:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5185BC13-C9E1-4103-8449-FC23579A53D1--312D9895-3696-4E7F-B089-80B1D0C25C26 (Friendly Name: 2e3e6efc-c126-4b1d-a149-7ea2ce66a505) successfully connected to port ACE52A7C-44F0-45BB-954A-F926C9DA6FBB (Friendly Name: 2e3e6efc-c126-4b1d-a149-7ea2ce66a505) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083457Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56085232n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1367718931-1090767329-603736452-35119171438/28/2021 3:35:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5185BC13-C9E1-4103-8449-FC23579A53D1--312D9895-3696-4E7F-B089-80B1D0C25C26 (Friendly Name: ).2330400-92233720368547758083456Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56085232n-h1-712140-11.cbci-712140-11.local8/28/2021 3:35:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403455Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:35:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B05AF015-AFF9-4C8A-A122-A9CB2D60646A--D27B8C07-D421-4A28-A71E-BB814F52F24E (Friendly Name: bb834a85-c872-4038-b7af-a0af1409fea6) successfully connected to port 127BC00F-4563-4F70-85C6-6ABB85E00D1F (Friendly Name: bb834a85-c872-4038-b7af-a0af1409fea6) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083454Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39564580n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2958749717-1284157433-3416859297-17849631178/28/2021 3:34:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B05AF015-AFF9-4C8A-A122-A9CB2D60646A--D27B8C07-D421-4A28-A71E-BB814F52F24E (Friendly Name: ).2330400-92233720368547758083453Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39564580n-h1-712140-11.cbci-712140-11.local8/28/2021 3:34:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0ABD3AB9-7833-489A-971D-CFEE607C0503--B265E105-82D0-4016-AA54-46E83FE0DE92 (Friendly Name: 70ba8faf-3c2d-4e20-829a-d04796bf6fcc) successfully connected to port A7EDD31D-F01B-4CD0-985F-E7D37526748C (Friendly Name: 70ba8faf-3c2d-4e20-829a-d04796bf6fcc) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083452Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21125832n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-180173497-1218082867-4006550935-506911688/28/2021 3:34:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0ABD3AB9-7833-489A-971D-CFEE607C0503--B265E105-82D0-4016-AA54-46E83FE0DE92 (Friendly Name: ).2330400-92233720368547758083451Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21125832n-h1-712140-11.cbci-712140-11.local8/28/2021 3:34:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EF4F1DE3-B170-403A-9372-C508CA72E875--25A5C764-C944-44BD-8FEC-43A955421C34 (Friendly Name: 0574963f-66b9-4021-90e0-2bb08843dd2e).2330400-92233720368547758083450Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34204444n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4014939619-1077588336-147157651-19781680108/28/2021 3:33:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EF4F1DE3-B170-403A-9372-C508CA72E875--25A5C764-C944-44BD-8FEC-43A955421C34 successfully disconnected from port .2340400-92233720368547758083449Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34204444n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4014939619-1077588336-147157651-19781680108/28/2021 3:33:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic ED719019-8AFD-426D-9640-F6F32A8EF4E4--546C406D-2775-4642-AE29-1C74A2D1E75D (Friendly Name: aa0b5af4-ad94-4c99-b386-863a998c9a18).2330400-92233720368547758083448Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42485320n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3983642649-1114475261-4093001878-38412324268/28/2021 3:33:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC ED719019-8AFD-426D-9640-F6F32A8EF4E4--546C406D-2775-4642-AE29-1C74A2D1E75D successfully disconnected from port .2340400-92233720368547758083447Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42485320n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3983642649-1114475261-4093001878-38412324268/28/2021 3:33:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EF4F1DE3-B170-403A-9372-C508CA72E875--25A5C764-C944-44BD-8FEC-43A955421C34 (Friendly Name: 0574963f-66b9-4021-90e0-2bb08843dd2e) successfully connected to port AA9AD5CA-A1E9-4F45-9977-07AF99823614 (Friendly Name: 0574963f-66b9-4021-90e0-2bb08843dd2e) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083446Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3420540n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4014939619-1077588336-147157651-19781680108/28/2021 3:33:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EF4F1DE3-B170-403A-9372-C508CA72E875--25A5C764-C944-44BD-8FEC-43A955421C34 (Friendly Name: ).2330400-92233720368547758083445Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3420540n-h1-712140-11.cbci-712140-11.local8/28/2021 3:33:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403444Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:32:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-A0-AB-7D has moved from port 50F3AEC2-837D-4B8A-A375-CD7AD4351F1D (Friendly Name: aa0b5af4-ad94-4c99-b386-863a998c9a18) to port 50F3AEC2-837D-4B8A-A375-CD7AD4351F1D (Friendly Name: aa0b5af4-ad94-4c99-b386-863a998c9a18).250410180-92233720368547758083443Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25403368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:32:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC ED719019-8AFD-426D-9640-F6F32A8EF4E4--546C406D-2775-4642-AE29-1C74A2D1E75D (Friendly Name: aa0b5af4-ad94-4c99-b386-863a998c9a18) successfully connected to port 50F3AEC2-837D-4B8A-A375-CD7AD4351F1D (Friendly Name: aa0b5af4-ad94-4c99-b386-863a998c9a18) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083442Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42485888n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3983642649-1114475261-4093001878-38412324268/28/2021 3:32:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic ED719019-8AFD-426D-9640-F6F32A8EF4E4--546C406D-2775-4642-AE29-1C74A2D1E75D (Friendly Name: ).2330400-92233720368547758083441Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42485320n-h1-712140-11.cbci-712140-11.local8/28/2021 3:32:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 07E42499-E809-44F0-9ECE-7917BEB2D658--46F290E5-64B8-49C3-9FC8-68AD411FBF80 (Friendly Name: aa0b5af4-ad94-4c99-b386-863a998c9a18).2330400-92233720368547758083440Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45002760n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-132392089-1156638729-393858718-14904654708/28/2021 3:32:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 07E42499-E809-44F0-9ECE-7917BEB2D658--46F290E5-64B8-49C3-9FC8-68AD411FBF80 successfully disconnected from port .2340400-92233720368547758083439Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45002760n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-132392089-1156638729-393858718-14904654708/28/2021 3:32:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403438Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:32:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 07E42499-E809-44F0-9ECE-7917BEB2D658--46F290E5-64B8-49C3-9FC8-68AD411FBF80 (Friendly Name: aa0b5af4-ad94-4c99-b386-863a998c9a18) successfully connected to port 51111CBC-CD8A-4856-8DF5-5CD26D452274 (Friendly Name: aa0b5af4-ad94-4c99-b386-863a998c9a18) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083437Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45004540n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-132392089-1156638729-393858718-14904654708/28/2021 3:31:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 07E42499-E809-44F0-9ECE-7917BEB2D658--46F290E5-64B8-49C3-9FC8-68AD411FBF80 (Friendly Name: ).2330400-92233720368547758083436Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45004540n-h1-712140-11.cbci-712140-11.local8/28/2021 3:31:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A0CBFE8E-EEB6-4B45-BAA4-EB17F64EFEE4--F3F3DC8B-4C5A-4641-B623-D2554227DEE3 (Friendly Name: 2e6b3ae9-360b-47ed-8714-9fde303ff5ff).2330400-92233720368547758083435Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8003208n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2697723534-1262874294-401319098-38418716068/28/2021 3:30:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0CBFE8E-EEB6-4B45-BAA4-EB17F64EFEE4--F3F3DC8B-4C5A-4641-B623-D2554227DEE3 successfully disconnected from port .2340400-92233720368547758083434Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8003208n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2697723534-1262874294-401319098-38418716068/28/2021 3:30:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0CBFE8E-EEB6-4B45-BAA4-EB17F64EFEE4--F3F3DC8B-4C5A-4641-B623-D2554227DEE3 (Friendly Name: 2e6b3ae9-360b-47ed-8714-9fde303ff5ff) successfully connected to port A022FA7B-11F3-4F8A-9C85-14FB52541657 (Friendly Name: 2e6b3ae9-360b-47ed-8714-9fde303ff5ff) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083433Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8001924n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2697723534-1262874294-401319098-38418716068/28/2021 3:29:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A0CBFE8E-EEB6-4B45-BAA4-EB17F64EFEE4--F3F3DC8B-4C5A-4641-B623-D2554227DEE3 (Friendly Name: ).2330400-92233720368547758083432Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8001924n-h1-712140-11.cbci-712140-11.local8/28/2021 3:29:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 15609255-9F27-4463-B8DA-AC394958871D--A8648DA0-A9ED-4938-A8F8-59A9C75341F9 (Friendly Name: aca8234b-d4d1-4d09-8249-28972abdf1f4).2330400-92233720368547758083431Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33044720n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-358650453-1147379495-967629496-4954092258/28/2021 3:29:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 15609255-9F27-4463-B8DA-AC394958871D--A8648DA0-A9ED-4938-A8F8-59A9C75341F9 successfully disconnected from port .2340400-92233720368547758083430Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33044720n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-358650453-1147379495-967629496-4954092258/28/2021 3:29:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 15609255-9F27-4463-B8DA-AC394958871D--A8648DA0-A9ED-4938-A8F8-59A9C75341F9 (Friendly Name: aca8234b-d4d1-4d09-8249-28972abdf1f4) successfully connected to port 3C010976-0286-4AE4-B7B2-213EC0342B6E (Friendly Name: aca8234b-d4d1-4d09-8249-28972abdf1f4) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083429Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33043460n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-358650453-1147379495-967629496-4954092258/28/2021 3:29:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 15609255-9F27-4463-B8DA-AC394958871D--A8648DA0-A9ED-4938-A8F8-59A9C75341F9 (Friendly Name: ).2330400-92233720368547758083428Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33043460n-h1-712140-11.cbci-712140-11.local8/28/2021 3:29:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AD95D42A-E854-4DAD-8285-0B688514577A--93B803E4-64F3-41B1-A6B5-346995201C87 (Friendly Name: 2e58d8cd-bba8-439d-9e28-7e9032628cb6).2330400-92233720368547758083427Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9521072n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2912277546-1303242836-1745585538-20525272378/28/2021 3:28:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD95D42A-E854-4DAD-8285-0B688514577A--93B803E4-64F3-41B1-A6B5-346995201C87 successfully disconnected from port .2340400-92233720368547758083426Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9521072n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2912277546-1303242836-1745585538-20525272378/28/2021 3:28:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-0C-69-2C has moved from port 7AAC756B-3343-4A88-B626-8725FDDBAFA8 (Friendly Name: br-data_External) to port 71026D88-3935-4350-B7BE-425B4E1AB2CF (Friendly Name: 2e58d8cd-bba8-439d-9e28-7e9032628cb6).250410180-92233720368547758083425Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem00n-h1-712140-11.cbci-712140-11.local8/28/2021 3:28:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 671454C6-B496-4888-862C-D8202BAE367D--E80A84CF-B78D-4523-80C7-6CE3F184E2D2 (Friendly Name: fb13305b-cc86-4dd9-ba74-c80d57565873).2330400-92233720368547758083424Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56963716n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1729385670-1216918678-551038086-21007355318/28/2021 3:28:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 671454C6-B496-4888-862C-D8202BAE367D--E80A84CF-B78D-4523-80C7-6CE3F184E2D2 successfully disconnected from port .2340400-92233720368547758083423Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56963716n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1729385670-1216918678-551038086-21007355318/28/2021 3:28:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 671454C6-B496-4888-862C-D8202BAE367D--E80A84CF-B78D-4523-80C7-6CE3F184E2D2 (Friendly Name: fb13305b-cc86-4dd9-ba74-c80d57565873) successfully connected to port 0FB275A6-DBB1-4FBC-8E81-8456BD5B963B (Friendly Name: fb13305b-cc86-4dd9-ba74-c80d57565873) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083422Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56964956n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1729385670-1216918678-551038086-21007355318/28/2021 3:28:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 671454C6-B496-4888-862C-D8202BAE367D--E80A84CF-B78D-4523-80C7-6CE3F184E2D2 (Friendly Name: ).2330400-92233720368547758083421Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56964956n-h1-712140-11.cbci-712140-11.local8/28/2021 3:28:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 26AC2B27-3EAE-4AE4-AA4B-0848ED28727F--43121A66-3818-46ED-A71E-E30528751DA4 (Friendly Name: ea15ea56-2fc4-4a9a-bec2-bcdfb5b2f459).2330400-92233720368547758083420Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19042300n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-648817447-1256472238-1208503210-21381880138/28/2021 3:28:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 26AC2B27-3EAE-4AE4-AA4B-0848ED28727F--43121A66-3818-46ED-A71E-E30528751DA4 successfully disconnected from port .2340400-92233720368547758083419Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19042300n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-648817447-1256472238-1208503210-21381880138/28/2021 3:28:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 120E9E1C-1436-4EB7-A30B-3751C97B374B--DC9C7763-3B77-476E-99AD-2E9F27E1AE13 (Friendly Name: 93c2d76a-bb5e-468c-8839-c17b06c57e58).2330400-92233720368547758083418Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49486128n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-302947868-1320621110-1362561955-12619273698/28/2021 3:28:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 120E9E1C-1436-4EB7-A30B-3751C97B374B--DC9C7763-3B77-476E-99AD-2E9F27E1AE13 successfully disconnected from port .2340400-92233720368547758083417Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49486128n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-302947868-1320621110-1362561955-12619273698/28/2021 3:28:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 8E8862ED-A4D7-422C-8994-A0BD12EA8340--6829BADB-50CC-4606-B29B-41D9F5AB304E (Friendly Name: 30632eb4-a0e5-41fc-9cb4-74e4fa55453d).2330400-92233720368547758083416Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43445088n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2391302893-1110222039-3181417609-10823869628/28/2021 3:28:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8E8862ED-A4D7-422C-8994-A0BD12EA8340--6829BADB-50CC-4606-B29B-41D9F5AB304E successfully disconnected from port .2340400-92233720368547758083415Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43445088n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2391302893-1110222039-3181417609-10823869628/28/2021 3:28:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403414Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:28:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 26AC2B27-3EAE-4AE4-AA4B-0848ED28727F--43121A66-3818-46ED-A71E-E30528751DA4 (Friendly Name: ea15ea56-2fc4-4a9a-bec2-bcdfb5b2f459) successfully connected to port D9EE77C1-0D6E-401E-9DAA-DC7D1D37C76D (Friendly Name: ea15ea56-2fc4-4a9a-bec2-bcdfb5b2f459) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083413Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19042184n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-648817447-1256472238-1208503210-21381880138/28/2021 3:28:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 26AC2B27-3EAE-4AE4-AA4B-0848ED28727F--43121A66-3818-46ED-A71E-E30528751DA4 (Friendly Name: ).2330400-92233720368547758083412Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19042184n-h1-712140-11.cbci-712140-11.local8/28/2021 3:28:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 16CC5309-69E7-45B8-9961-229D9A2DB5F9--9C797ADD-2F7A-4743-8B9C-85A05053AE62 (Friendly Name: 480caf0e-4803-48fc-9bbb-689c4bfe2fd3).2330400-92233720368547758083411Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36602360n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-382489353-1169713639-2636276121-41894004748/28/2021 3:28:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 16CC5309-69E7-45B8-9961-229D9A2DB5F9--9C797ADD-2F7A-4743-8B9C-85A05053AE62 successfully disconnected from port .2340400-92233720368547758083410Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36602360n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-382489353-1169713639-2636276121-41894004748/28/2021 3:28:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD95D42A-E854-4DAD-8285-0B688514577A--93B803E4-64F3-41B1-A6B5-346995201C87 (Friendly Name: 2e58d8cd-bba8-439d-9e28-7e9032628cb6) successfully connected to port 71026D88-3935-4350-B7BE-425B4E1AB2CF (Friendly Name: 2e58d8cd-bba8-439d-9e28-7e9032628cb6) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083409Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9523600n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2912277546-1303242836-1745585538-20525272378/28/2021 3:28:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AD95D42A-E854-4DAD-8285-0B688514577A--93B803E4-64F3-41B1-A6B5-346995201C87 (Friendly Name: ).2330400-92233720368547758083408Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9523600n-h1-712140-11.cbci-712140-11.local8/28/2021 3:28:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-32-5A-EB has moved from port 142CF9EE-F01D-4BF5-90C3-243F34BD9867 (Friendly Name: 480caf0e-4803-48fc-9bbb-689c4bfe2fd3) to port 142CF9EE-F01D-4BF5-90C3-243F34BD9867 (Friendly Name: 480caf0e-4803-48fc-9bbb-689c4bfe2fd3).250410180-92233720368547758083407Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25404112n-h1-712140-11.cbci-712140-11.local8/28/2021 3:28:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-32-5A-EB has moved from port 7AAC756B-3343-4A88-B626-8725FDDBAFA8 (Friendly Name: br-data_External) to port 142CF9EE-F01D-4BF5-90C3-243F34BD9867 (Friendly Name: 480caf0e-4803-48fc-9bbb-689c4bfe2fd3).250410180-92233720368547758083406Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25402804n-h1-712140-11.cbci-712140-11.local8/28/2021 3:28:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 16CC5309-69E7-45B8-9961-229D9A2DB5F9--9C797ADD-2F7A-4743-8B9C-85A05053AE62 (Friendly Name: 480caf0e-4803-48fc-9bbb-689c4bfe2fd3) successfully connected to port 142CF9EE-F01D-4BF5-90C3-243F34BD9867 (Friendly Name: 480caf0e-4803-48fc-9bbb-689c4bfe2fd3) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083405Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3660892n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-382489353-1169713639-2636276121-41894004748/28/2021 3:28:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 26AC2B27-3EAE-4AE4-AA4B-0848ED28727F--43121A66-3818-46ED-A71E-E30528751DA4 (Friendly Name: ea15ea56-2fc4-4a9a-bec2-bcdfb5b2f459).2330400-92233720368547758083404Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46002280n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-648817447-1256472238-1208503210-21381880138/28/2021 3:28:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 26AC2B27-3EAE-4AE4-AA4B-0848ED28727F--43121A66-3818-46ED-A71E-E30528751DA4 successfully disconnected from port .2340400-92233720368547758083403Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46002280n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-648817447-1256472238-1208503210-21381880138/28/2021 3:28:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 16CC5309-69E7-45B8-9961-229D9A2DB5F9--9C797ADD-2F7A-4743-8B9C-85A05053AE62 (Friendly Name: ).2330400-92233720368547758083402Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3660584n-h1-712140-11.cbci-712140-11.local8/28/2021 3:28:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8E8862ED-A4D7-422C-8994-A0BD12EA8340--6829BADB-50CC-4606-B29B-41D9F5AB304E (Friendly Name: 30632eb4-a0e5-41fc-9cb4-74e4fa55453d) successfully connected to port 8BFACB62-7FAE-4531-9D2E-DFAC2FEDB963 (Friendly Name: 30632eb4-a0e5-41fc-9cb4-74e4fa55453d) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083401Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43445088n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2391302893-1110222039-3181417609-10823869628/28/2021 3:27:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 8E8862ED-A4D7-422C-8994-A0BD12EA8340--6829BADB-50CC-4606-B29B-41D9F5AB304E (Friendly Name: ).2330400-92233720368547758083400Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43445088n-h1-712140-11.cbci-712140-11.local8/28/2021 3:27:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 120E9E1C-1436-4EB7-A30B-3751C97B374B--DC9C7763-3B77-476E-99AD-2E9F27E1AE13 (Friendly Name: 93c2d76a-bb5e-468c-8839-c17b06c57e58) successfully connected to port 8DB65CC3-45EC-442B-83CE-11880821697D (Friendly Name: 93c2d76a-bb5e-468c-8839-c17b06c57e58) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083399Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49486128n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-302947868-1320621110-1362561955-12619273698/28/2021 3:27:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 120E9E1C-1436-4EB7-A30B-3751C97B374B--DC9C7763-3B77-476E-99AD-2E9F27E1AE13 (Friendly Name: ).2330400-92233720368547758083398Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49486128n-h1-712140-11.cbci-712140-11.local8/28/2021 3:27:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 26AC2B27-3EAE-4AE4-AA4B-0848ED28727F--43121A66-3818-46ED-A71E-E30528751DA4 (Friendly Name: ea15ea56-2fc4-4a9a-bec2-bcdfb5b2f459) successfully connected to port D9EE77C1-0D6E-401E-9DAA-DC7D1D37C76D (Friendly Name: ea15ea56-2fc4-4a9a-bec2-bcdfb5b2f459) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083397Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46004788n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-648817447-1256472238-1208503210-21381880138/28/2021 3:27:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 26AC2B27-3EAE-4AE4-AA4B-0848ED28727F--43121A66-3818-46ED-A71E-E30528751DA4 (Friendly Name: ).2330400-92233720368547758083396Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46004788n-h1-712140-11.cbci-712140-11.local8/28/2021 3:27:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079).2330400-92233720368547758083395Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47484980n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:27:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 successfully disconnected from port .2340400-92233720368547758083394Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47484980n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:27:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1BB5DB4E-B39B-409F-8745-C75D575ED12C--BF3BC225-64EE-40DF-9E62-05F85A60A1C9 (Friendly Name: c67ccdb1-647f-4fde-aee4-8f832d55c77d).2330400-92233720368547758083393Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52883596n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-464902990-1084208027-1573340551-7519186798/28/2021 3:27:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1BB5DB4E-B39B-409F-8745-C75D575ED12C--BF3BC225-64EE-40DF-9E62-05F85A60A1C9 successfully disconnected from port .2340400-92233720368547758083392Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52883596n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-464902990-1084208027-1573340551-7519186798/28/2021 3:27:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079) successfully connected to port 39F25C87-BEAE-43C8-BF17-C1F88C0F1EB6 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083391Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47483176n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:26:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: ).2330400-92233720368547758083390Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47483176n-h1-712140-11.cbci-712140-11.local8/28/2021 3:26:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079).2330400-92233720368547758083389Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44404996n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:26:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 successfully disconnected from port .2340400-92233720368547758083388Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44404996n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:26:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079) successfully connected to port 39F25C87-BEAE-43C8-BF17-C1F88C0F1EB6 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083387Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44404996n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:26:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: ).2330400-92233720368547758083386Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44404996n-h1-712140-11.cbci-712140-11.local8/28/2021 3:26:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079).2330400-92233720368547758083385Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9641416n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:26:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 successfully disconnected from port .2340400-92233720368547758083384Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9641416n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:26:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403383Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:26:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079) successfully connected to port 39F25C87-BEAE-43C8-BF17-C1F88C0F1EB6 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083382Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9643720n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:26:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: ).2330400-92233720368547758083381Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9643720n-h1-712140-11.cbci-712140-11.local8/28/2021 3:26:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079).2330400-92233720368547758083380Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem885148n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:26:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 successfully disconnected from port .2340400-92233720368547758083379Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem885148n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:26:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079) successfully connected to port 39F25C87-BEAE-43C8-BF17-C1F88C0F1EB6 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083378Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem885772n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:26:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: ).2330400-92233720368547758083377Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem885772n-h1-712140-11.cbci-712140-11.local8/28/2021 3:26:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079).2330400-92233720368547758083376Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem7005568n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:25:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 successfully disconnected from port .2340400-92233720368547758083375Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem7005568n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:25:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1BB5DB4E-B39B-409F-8745-C75D575ED12C--BF3BC225-64EE-40DF-9E62-05F85A60A1C9 (Friendly Name: c67ccdb1-647f-4fde-aee4-8f832d55c77d) successfully connected to port C89DE5E2-53FB-4180-85B8-9AF5B5B11EF0 (Friendly Name: c67ccdb1-647f-4fde-aee4-8f832d55c77d) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083374Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52883596n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-464902990-1084208027-1573340551-7519186798/28/2021 3:25:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1BB5DB4E-B39B-409F-8745-C75D575ED12C--BF3BC225-64EE-40DF-9E62-05F85A60A1C9 (Friendly Name: ).2330400-92233720368547758083373Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52883596n-h1-712140-11.cbci-712140-11.local8/28/2021 3:25:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1BB5DB4E-B39B-409F-8745-C75D575ED12C--BF3BC225-64EE-40DF-9E62-05F85A60A1C9 (Friendly Name: c67ccdb1-647f-4fde-aee4-8f832d55c77d).2330400-92233720368547758083372Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60526004n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-464902990-1084208027-1573340551-7519186798/28/2021 3:25:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1BB5DB4E-B39B-409F-8745-C75D575ED12C--BF3BC225-64EE-40DF-9E62-05F85A60A1C9 successfully disconnected from port .2340400-92233720368547758083371Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60526004n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-464902990-1084208027-1573340551-7519186798/28/2021 3:25:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 67E1C048-47AA-45DB-82B6-F8BFFE08A85B--3AB5E030-41DE-46C9-9C81-1DFF42384162 (Friendly Name: 2bfa640d-4b1c-4164-8e31-d58fe42b2ac6).2330400-92233720368547758083370Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37484548n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1742848072-1171998634-3220747906-15377390068/28/2021 3:25:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 67E1C048-47AA-45DB-82B6-F8BFFE08A85B--3AB5E030-41DE-46C9-9C81-1DFF42384162 successfully disconnected from port .2340400-92233720368547758083369Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37484548n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1742848072-1171998634-3220747906-15377390068/28/2021 3:25:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1BB5DB4E-B39B-409F-8745-C75D575ED12C--BF3BC225-64EE-40DF-9E62-05F85A60A1C9 (Friendly Name: c67ccdb1-647f-4fde-aee4-8f832d55c77d) successfully connected to port C89DE5E2-53FB-4180-85B8-9AF5B5B11EF0 (Friendly Name: c67ccdb1-647f-4fde-aee4-8f832d55c77d) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083368Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60526004n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-464902990-1084208027-1573340551-7519186798/28/2021 3:25:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1BB5DB4E-B39B-409F-8745-C75D575ED12C--BF3BC225-64EE-40DF-9E62-05F85A60A1C9 (Friendly Name: ).2330400-92233720368547758083367Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60526004n-h1-712140-11.cbci-712140-11.local8/28/2021 3:25:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079) successfully connected to port 39F25C87-BEAE-43C8-BF17-C1F88C0F1EB6 (Friendly Name: c204362f-0902-43e4-8dae-b31b0690d079) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083366Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem7005568n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3591235640-1112516272-3563119515-16392480168/28/2021 3:25:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D60DE838-A6B0-424F-9BE3-60D490F0B461--1E45F798-1059-4262-ADD4-6CD34FFC4D17 (Friendly Name: ).2330400-92233720368547758083365Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem7005568n-h1-712140-11.cbci-712140-11.local8/28/2021 3:25:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 67E1C048-47AA-45DB-82B6-F8BFFE08A85B--3AB5E030-41DE-46C9-9C81-1DFF42384162 (Friendly Name: 2bfa640d-4b1c-4164-8e31-d58fe42b2ac6) successfully connected to port F6AC7F94-B4B1-4B68-9345-B578D781AEA3 (Friendly Name: 2bfa640d-4b1c-4164-8e31-d58fe42b2ac6) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083364Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37486020n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1742848072-1171998634-3220747906-15377390068/28/2021 3:24:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 67E1C048-47AA-45DB-82B6-F8BFFE08A85B--3AB5E030-41DE-46C9-9C81-1DFF42384162 (Friendly Name: ).2330400-92233720368547758083363Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37486020n-h1-712140-11.cbci-712140-11.local8/28/2021 3:24:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 420792DE-9C9D-4B3F-8DA4-DE509F114947--A77DF35C-0FF5-4DB6-BD0A-F56BF3D71E11 (Friendly Name: ab0a196d-fa60-4648-8f51-eaac13424aa5).2330400-92233720368547758083362Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44561728n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1107792606-1262460061-1356768397-11959709758/28/2021 3:24:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 420792DE-9C9D-4B3F-8DA4-DE509F114947--A77DF35C-0FF5-4DB6-BD0A-F56BF3D71E11 successfully disconnected from port .2340400-92233720368547758083361Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44561728n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1107792606-1262460061-1356768397-11959709758/28/2021 3:24:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 420792DE-9C9D-4B3F-8DA4-DE509F114947--A77DF35C-0FF5-4DB6-BD0A-F56BF3D71E11 (Friendly Name: ab0a196d-fa60-4648-8f51-eaac13424aa5) successfully connected to port EC3D4CB0-EF76-4F49-BE51-56224477A7D6 (Friendly Name: ab0a196d-fa60-4648-8f51-eaac13424aa5) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083360Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44561728n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1107792606-1262460061-1356768397-11959709758/28/2021 3:24:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 420792DE-9C9D-4B3F-8DA4-DE509F114947--A77DF35C-0FF5-4DB6-BD0A-F56BF3D71E11 (Friendly Name: ).2330400-92233720368547758083359Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44561728n-h1-712140-11.cbci-712140-11.local8/28/2021 3:24:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D9F2460E-9051-4C2C-BEB6-B75228884AFB--5CD172B0-C7AC-431F-8D6D-474E95E9C844 (Friendly Name: 105204d5-f2eb-47ce-a5c5-37ed97b5a39c).2330400-92233720368547758083358Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5428928n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3656533518-1277988945-1387771582-42159657368/28/2021 3:23:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D9F2460E-9051-4C2C-BEB6-B75228884AFB--5CD172B0-C7AC-431F-8D6D-474E95E9C844 successfully disconnected from port .2340400-92233720368547758083357Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5428928n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3656533518-1277988945-1387771582-42159657368/28/2021 3:23:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D9F2460E-9051-4C2C-BEB6-B75228884AFB--5CD172B0-C7AC-431F-8D6D-474E95E9C844 (Friendly Name: 105204d5-f2eb-47ce-a5c5-37ed97b5a39c) successfully connected to port AEF2AE0D-D0E3-4933-8097-F686E5EF33D3 (Friendly Name: 105204d5-f2eb-47ce-a5c5-37ed97b5a39c) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083356Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54285440n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3656533518-1277988945-1387771582-42159657368/28/2021 3:23:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D9F2460E-9051-4C2C-BEB6-B75228884AFB--5CD172B0-C7AC-431F-8D6D-474E95E9C844 (Friendly Name: ).2330400-92233720368547758083355Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54285440n-h1-712140-11.cbci-712140-11.local8/28/2021 3:23:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 123B1748-C71F-4274-937A-BF765505B149--40F2B733-A7BE-468D-B05D-6AA04DD51ADF (Friendly Name: a24e10d3-f346-4d12-9093-b8da88cd649d).2330400-92233720368547758083354Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48285848n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-305862472-1114949407-1992260243-12363380058/28/2021 3:22:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 123B1748-C71F-4274-937A-BF765505B149--40F2B733-A7BE-468D-B05D-6AA04DD51ADF successfully disconnected from port .2340400-92233720368547758083353Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48285848n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-305862472-1114949407-1992260243-12363380058/28/2021 3:22:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C1A8CEF7-EEFB-42FB-9A4F-79D71D7B2A41--C8D41092-652E-4A49-8F0C-783D3A88C80A (Friendly Name: f51eae07-f5d8-47d1-88a5-5fccba2a8d02).2330400-92233720368547758083352Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55322768n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3249065719-1123806971-3615051674-10933030698/28/2021 3:22:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C1A8CEF7-EEFB-42FB-9A4F-79D71D7B2A41--C8D41092-652E-4A49-8F0C-783D3A88C80A successfully disconnected from port .2340400-92233720368547758083351Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55322768n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3249065719-1123806971-3615051674-10933030698/28/2021 3:22:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C1A8CEF7-EEFB-42FB-9A4F-79D71D7B2A41--C8D41092-652E-4A49-8F0C-783D3A88C80A (Friendly Name: f51eae07-f5d8-47d1-88a5-5fccba2a8d02) successfully connected to port DB1C0E71-EC06-4B9D-BE4F-8BC018F7ACA2 (Friendly Name: f51eae07-f5d8-47d1-88a5-5fccba2a8d02) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083350Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55322104n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3249065719-1123806971-3615051674-10933030698/28/2021 3:22:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C1A8CEF7-EEFB-42FB-9A4F-79D71D7B2A41--C8D41092-652E-4A49-8F0C-783D3A88C80A (Friendly Name: ).2330400-92233720368547758083349Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55322104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:22:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 63684817-9BD2-4A8C-82AE-AAC59CE6A027--9861A8C1-4338-451D-B892-8551FA1B6B74 (Friendly Name: b21c78a4-b090-4282-b80c-1ab4e9ebc612).2330400-92233720368547758083348Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58604920n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1667778583-1250728914-3316297346-6648562208/28/2021 3:21:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 63684817-9BD2-4A8C-82AE-AAC59CE6A027--9861A8C1-4338-451D-B892-8551FA1B6B74 successfully disconnected from port .2340400-92233720368547758083347Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58604920n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1667778583-1250728914-3316297346-6648562208/28/2021 3:21:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 63684817-9BD2-4A8C-82AE-AAC59CE6A027--6E42FFBA-E014-4FC2-BA9D-3D8E23E86A31 (Friendly Name: fe86e9cb-f347-4594-a1db-9c48647d977b).2330400-92233720368547758083346Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58604920n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1667778583-1250728914-3316297346-6648562208/28/2021 3:21:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 63684817-9BD2-4A8C-82AE-AAC59CE6A027--6E42FFBA-E014-4FC2-BA9D-3D8E23E86A31 successfully disconnected from port .2340400-92233720368547758083345Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58604920n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1667778583-1250728914-3316297346-6648562208/28/2021 3:21:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 63684817-9BD2-4A8C-82AE-AAC59CE6A027--404A6D24-C77A-44C1-B5BD-3AC43B1FAE64 (Friendly Name: 56fcdf6b-2c54-4124-8a69-9bdbdf980e83).2330400-92233720368547758083344Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58604920n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1667778583-1250728914-3316297346-6648562208/28/2021 3:21:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 63684817-9BD2-4A8C-82AE-AAC59CE6A027--404A6D24-C77A-44C1-B5BD-3AC43B1FAE64 successfully disconnected from port .2340400-92233720368547758083343Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58604920n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1667778583-1250728914-3316297346-6648562208/28/2021 3:21:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 63684817-9BD2-4A8C-82AE-AAC59CE6A027--404A6D24-C77A-44C1-B5BD-3AC43B1FAE64 (Friendly Name: 56fcdf6b-2c54-4124-8a69-9bdbdf980e83) successfully connected to port 657B971C-F913-4293-B771-0827812DE566 (Friendly Name: 56fcdf6b-2c54-4124-8a69-9bdbdf980e83) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083342Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58604920n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1667778583-1250728914-3316297346-6648562208/28/2021 3:21:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 63684817-9BD2-4A8C-82AE-AAC59CE6A027--404A6D24-C77A-44C1-B5BD-3AC43B1FAE64 (Friendly Name: ).2330400-92233720368547758083341Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58604920n-h1-712140-11.cbci-712140-11.local8/28/2021 3:21:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 63684817-9BD2-4A8C-82AE-AAC59CE6A027--6E42FFBA-E014-4FC2-BA9D-3D8E23E86A31 (Friendly Name: fe86e9cb-f347-4594-a1db-9c48647d977b) successfully connected to port D24F489A-4176-4919-BD93-C4B903DE9B44 (Friendly Name: fe86e9cb-f347-4594-a1db-9c48647d977b) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083340Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58604920n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1667778583-1250728914-3316297346-6648562208/28/2021 3:21:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 63684817-9BD2-4A8C-82AE-AAC59CE6A027--6E42FFBA-E014-4FC2-BA9D-3D8E23E86A31 (Friendly Name: ).2330400-92233720368547758083339Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58604920n-h1-712140-11.cbci-712140-11.local8/28/2021 3:21:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 63684817-9BD2-4A8C-82AE-AAC59CE6A027--9861A8C1-4338-451D-B892-8551FA1B6B74 (Friendly Name: b21c78a4-b090-4282-b80c-1ab4e9ebc612) successfully connected to port 99B26608-DE57-480B-87E1-21E383303679 (Friendly Name: b21c78a4-b090-4282-b80c-1ab4e9ebc612) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083338Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58604920n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1667778583-1250728914-3316297346-6648562208/28/2021 3:21:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 63684817-9BD2-4A8C-82AE-AAC59CE6A027--9861A8C1-4338-451D-B892-8551FA1B6B74 (Friendly Name: ).2330400-92233720368547758083337Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58604920n-h1-712140-11.cbci-712140-11.local8/28/2021 3:21:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 87A9AC63-D09C-4C66-A5E8-F15B84CAD5DA--FB19BE28-F06E-4906-9D26-2AE5DC5E51B8 (Friendly Name: 53b5ff13-3bf2-4b64-a3c9-ffedcbc32d8e).2330400-92233720368547758083336Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5052660n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2276043875-1281806492-1542580389-36714441008/28/2021 3:20:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 87A9AC63-D09C-4C66-A5E8-F15B84CAD5DA--FB19BE28-F06E-4906-9D26-2AE5DC5E51B8 successfully disconnected from port .2340400-92233720368547758083335Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5052660n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2276043875-1281806492-1542580389-36714441008/28/2021 3:20:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118403334Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041100n-h1-712140-11.cbci-712140-11.local8/28/2021 3:20:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 123B1748-C71F-4274-937A-BF765505B149--40F2B733-A7BE-468D-B05D-6AA04DD51ADF (Friendly Name: a24e10d3-f346-4d12-9093-b8da88cd649d) successfully connected to port C689E409-FC8B-41B9-BF52-0F2DC7D19CF0 (Friendly Name: a24e10d3-f346-4d12-9093-b8da88cd649d) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083333Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48285848n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-305862472-1114949407-1992260243-12363380058/28/2021 3:20:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 123B1748-C71F-4274-937A-BF765505B149--40F2B733-A7BE-468D-B05D-6AA04DD51ADF (Friendly Name: ).2330400-92233720368547758083332Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48285848n-h1-712140-11.cbci-712140-11.local8/28/2021 3:20:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 109A000F-24AE-4651-8C0B-CFA6DA44EDD1--DCA4BCCC-7359-4E9B-A863-B554375524DC (Friendly Name: d05896fe-6405-4288-9970-cdefd1c51f80).2330400-92233720368547758083331Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52165992n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-278528015-1179722926-2798586764-35219878028/28/2021 3:19:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 109A000F-24AE-4651-8C0B-CFA6DA44EDD1--DCA4BCCC-7359-4E9B-A863-B554375524DC successfully disconnected from port .2340400-92233720368547758083330Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52165992n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-278528015-1179722926-2798586764-35219878028/28/2021 3:19:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 109A000F-24AE-4651-8C0B-CFA6DA44EDD1--DCA4BCCC-7359-4E9B-A863-B554375524DC (Friendly Name: d05896fe-6405-4288-9970-cdefd1c51f80) successfully connected to port 4E0F4A15-2751-4D7F-B200-C1BD61356018 (Friendly Name: d05896fe-6405-4288-9970-cdefd1c51f80) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083329Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52165192n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-278528015-1179722926-2798586764-35219878028/28/2021 3:19:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 109A000F-24AE-4651-8C0B-CFA6DA44EDD1--DCA4BCCC-7359-4E9B-A863-B554375524DC (Friendly Name: ).2330400-92233720368547758083328Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52165192n-h1-712140-11.cbci-712140-11.local8/28/2021 3:19:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A0C81038-EBB8-4DCC-86F0-A68D95860ADA--F5E161F1-690F-447D-96CF-96F7D39A23BF (Friendly Name: ef7db9ed-3953-44e7-bea0-155ccc15d5d6).2330400-92233720368547758083327Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46442336n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2697465912-1305275320-2376528006-36581229018/28/2021 3:19:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0C81038-EBB8-4DCC-86F0-A68D95860ADA--F5E161F1-690F-447D-96CF-96F7D39A23BF successfully disconnected from port .2340400-92233720368547758083326Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46442336n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2697465912-1305275320-2376528006-36581229018/28/2021 3:19:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 9FBBF55C-E458-4F02-83C0-E0033C3D475F--0F86131B-5D05-46AB-86DD-26BA17C83274 (Friendly Name: 807014a3-b273-4961-9c3f-0a72e326a1de).2330400-92233720368547758083325Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10445780n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2679895388-1325589592-65060995-15985042528/28/2021 3:19:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9FBBF55C-E458-4F02-83C0-E0033C3D475F--0F86131B-5D05-46AB-86DD-26BA17C83274 successfully disconnected from port .2340400-92233720368547758083324Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10445780n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2679895388-1325589592-65060995-15985042528/28/2021 3:19:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403323Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041100n-h1-712140-11.cbci-712140-11.local8/28/2021 3:19:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9FBBF55C-E458-4F02-83C0-E0033C3D475F--0F86131B-5D05-46AB-86DD-26BA17C83274 (Friendly Name: 807014a3-b273-4961-9c3f-0a72e326a1de) successfully connected to port 411F46AC-5FCE-486F-AD19-70290F34BC13 (Friendly Name: 807014a3-b273-4961-9c3f-0a72e326a1de) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083322Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10445136n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2679895388-1325589592-65060995-15985042528/28/2021 3:19:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 9FBBF55C-E458-4F02-83C0-E0033C3D475F--0F86131B-5D05-46AB-86DD-26BA17C83274 (Friendly Name: ).2330400-92233720368547758083321Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10445136n-h1-712140-11.cbci-712140-11.local8/28/2021 3:19:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B73588C6-9653-4C21-A912-488C6D835C7C--B2A60405-DECE-475F-AFAF-A78A28B4A67F (Friendly Name: 89861e2b-f653-4b6b-9c51-131e9a564844).2330400-92233720368547758083320Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42725380n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3073738950-1277269587-2353533609-20864377418/28/2021 3:18:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B73588C6-9653-4C21-A912-488C6D835C7C--B2A60405-DECE-475F-AFAF-A78A28B4A67F successfully disconnected from port .2340400-92233720368547758083319Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42725380n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3073738950-1277269587-2353533609-20864377418/28/2021 3:18:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 62BA474D-B51C-4DB8-A9BE-B1233FE24880--1950A41B-442F-4BF3-9BA3-F99D7942D9EC (Friendly Name: 9c8508fb-916b-48aa-94fc-9b92357ed215).2330400-92233720368547758083318Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60365944n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1656375117-1303950620-598851241-21522601598/28/2021 3:18:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 62BA474D-B51C-4DB8-A9BE-B1233FE24880--1950A41B-442F-4BF3-9BA3-F99D7942D9EC successfully disconnected from port .2340400-92233720368547758083317Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60365944n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1656375117-1303950620-598851241-21522601598/28/2021 3:18:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 62BA474D-B51C-4DB8-A9BE-B1233FE24880--1950A41B-442F-4BF3-9BA3-F99D7942D9EC (Friendly Name: 9c8508fb-916b-48aa-94fc-9b92357ed215) successfully connected to port 4DC8B5D9-7AC1-480A-A65A-FF7193778D2A (Friendly Name: 9c8508fb-916b-48aa-94fc-9b92357ed215) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083316Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60366024n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1656375117-1303950620-598851241-21522601598/28/2021 3:17:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 62BA474D-B51C-4DB8-A9BE-B1233FE24880--1950A41B-442F-4BF3-9BA3-F99D7942D9EC (Friendly Name: ).2330400-92233720368547758083315Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60366024n-h1-712140-11.cbci-712140-11.local8/28/2021 3:17:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CBB15583-F1A3-478E-84ED-6761FEA5E99B--E85FF39F-AE4D-48C2-9379-A598F28B1F96 (Friendly Name: b9435f66-2834-4a1f-9c1a-de9126fa5887).2330400-92233720368547758083314Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32683084n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3417396611-1200550307-1634200964-26157808628/28/2021 3:17:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CBB15583-F1A3-478E-84ED-6761FEA5E99B--E85FF39F-AE4D-48C2-9379-A598F28B1F96 successfully disconnected from port .2340400-92233720368547758083313Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32683084n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3417396611-1200550307-1634200964-26157808628/28/2021 3:17:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0C81038-EBB8-4DCC-86F0-A68D95860ADA--F5E161F1-690F-447D-96CF-96F7D39A23BF (Friendly Name: ef7db9ed-3953-44e7-bea0-155ccc15d5d6) successfully connected to port C9E29122-59D1-45B3-B2C3-A9EA688D524B (Friendly Name: ef7db9ed-3953-44e7-bea0-155ccc15d5d6) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083312Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46444384n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2697465912-1305275320-2376528006-36581229018/28/2021 3:17:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A0C81038-EBB8-4DCC-86F0-A68D95860ADA--F5E161F1-690F-447D-96CF-96F7D39A23BF (Friendly Name: ).2330400-92233720368547758083311Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46444384n-h1-712140-11.cbci-712140-11.local8/28/2021 3:17:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E31C47C2-799B-40E1-8130-CCC136A36941--C04E0DE0-4A7A-490C-BEBB-9A81630CD372 (Friendly Name: 947db37c-140b-42cf-9ed9-b285e6e8914f).2330400-92233720368547758083310Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5336688n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3810281410-1088518555-3251384449-10974421028/28/2021 3:17:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E31C47C2-799B-40E1-8130-CCC136A36941--C04E0DE0-4A7A-490C-BEBB-9A81630CD372 successfully disconnected from port .2340400-92233720368547758083309Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5336688n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3810281410-1088518555-3251384449-10974421028/28/2021 3:17:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E31C47C2-799B-40E1-8130-CCC136A36941--C04E0DE0-4A7A-490C-BEBB-9A81630CD372 (Friendly Name: 947db37c-140b-42cf-9ed9-b285e6e8914f) successfully connected to port E0687EA3-DEB7-483D-80FE-D8A3ABB99C08 (Friendly Name: 947db37c-140b-42cf-9ed9-b285e6e8914f) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083308Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53365328n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3810281410-1088518555-3251384449-10974421028/28/2021 3:17:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E31C47C2-799B-40E1-8130-CCC136A36941--C04E0DE0-4A7A-490C-BEBB-9A81630CD372 (Friendly Name: ).2330400-92233720368547758083307Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53365328n-h1-712140-11.cbci-712140-11.local8/28/2021 3:17:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CBB15583-F1A3-478E-84ED-6761FEA5E99B--E85FF39F-AE4D-48C2-9379-A598F28B1F96 (Friendly Name: b9435f66-2834-4a1f-9c1a-de9126fa5887) successfully connected to port 8BE22401-33FA-488E-8E48-9A93E5F5009E (Friendly Name: b9435f66-2834-4a1f-9c1a-de9126fa5887) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083306Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32683084n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3417396611-1200550307-1634200964-26157808628/28/2021 3:17:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CBB15583-F1A3-478E-84ED-6761FEA5E99B--E85FF39F-AE4D-48C2-9379-A598F28B1F96 (Friendly Name: ).2330400-92233720368547758083305Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32683084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:17:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CBB15583-F1A3-478E-84ED-6761FEA5E99B--E85FF39F-AE4D-48C2-9379-A598F28B1F96 (Friendly Name: b9435f66-2834-4a1f-9c1a-de9126fa5887).2330400-92233720368547758083304Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57164704n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3417396611-1200550307-1634200964-26157808628/28/2021 3:17:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CBB15583-F1A3-478E-84ED-6761FEA5E99B--E85FF39F-AE4D-48C2-9379-A598F28B1F96 successfully disconnected from port .2340400-92233720368547758083303Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57164704n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3417396611-1200550307-1634200964-26157808628/28/2021 3:17:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 87A9AC63-D09C-4C66-A5E8-F15B84CAD5DA--FB19BE28-F06E-4906-9D26-2AE5DC5E51B8 (Friendly Name: 53b5ff13-3bf2-4b64-a3c9-ffedcbc32d8e) successfully connected to port 92200269-5D30-4EE8-B27A-69C94A3ABEA3 (Friendly Name: 53b5ff13-3bf2-4b64-a3c9-ffedcbc32d8e) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083302Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50523308n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2276043875-1281806492-1542580389-36714441008/28/2021 3:17:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 87A9AC63-D09C-4C66-A5E8-F15B84CAD5DA--FB19BE28-F06E-4906-9D26-2AE5DC5E51B8 (Friendly Name: ).2330400-92233720368547758083301Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50523308n-h1-712140-11.cbci-712140-11.local8/28/2021 3:17:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CBB15583-F1A3-478E-84ED-6761FEA5E99B--E85FF39F-AE4D-48C2-9379-A598F28B1F96 (Friendly Name: b9435f66-2834-4a1f-9c1a-de9126fa5887) successfully connected to port 8BE22401-33FA-488E-8E48-9A93E5F5009E (Friendly Name: b9435f66-2834-4a1f-9c1a-de9126fa5887) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083300Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57164856n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3417396611-1200550307-1634200964-26157808628/28/2021 3:17:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CBB15583-F1A3-478E-84ED-6761FEA5E99B--E85FF39F-AE4D-48C2-9379-A598F28B1F96 (Friendly Name: ).2330400-92233720368547758083299Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57164856n-h1-712140-11.cbci-712140-11.local8/28/2021 3:17:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F4FE2986-999B-4BB2-8E29-EE4A439B5E7A--6BE72B24-A4CC-44A8-A6E6-EC6B99214521 (Friendly Name: a836cd3b-4639-461e-9ad9-90a299e586f0).2330400-92233720368547758083298Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54205424n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4110297478-1269995931-1257122190-20530204838/28/2021 3:17:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F4FE2986-999B-4BB2-8E29-EE4A439B5E7A--6BE72B24-A4CC-44A8-A6E6-EC6B99214521 successfully disconnected from port .2340400-92233720368547758083297Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54205424n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4110297478-1269995931-1257122190-20530204838/28/2021 3:17:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403296Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:17:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F4FE2986-999B-4BB2-8E29-EE4A439B5E7A--6BE72B24-A4CC-44A8-A6E6-EC6B99214521 (Friendly Name: a836cd3b-4639-461e-9ad9-90a299e586f0) successfully connected to port 70D3B8BE-7E72-4FE9-A876-E0A46C4A5A79 (Friendly Name: a836cd3b-4639-461e-9ad9-90a299e586f0) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083295Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54205424n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4110297478-1269995931-1257122190-20530204838/28/2021 3:16:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F4FE2986-999B-4BB2-8E29-EE4A439B5E7A--6BE72B24-A4CC-44A8-A6E6-EC6B99214521 (Friendly Name: ).2330400-92233720368547758083294Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54205424n-h1-712140-11.cbci-712140-11.local8/28/2021 3:16:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EA33C97E-AEB7-4C8F-ADBC-F56F0148DEF8--1E1FED93-CEEE-4984-85A0-3C62B8F306E5 (Friendly Name: 427c4dea-9977-4192-b5e8-737eb8977f10).2330400-92233720368547758083293Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5248140n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3929262462-1284484791-1878375597-41753169938/28/2021 3:16:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EA33C97E-AEB7-4C8F-ADBC-F56F0148DEF8--1E1FED93-CEEE-4984-85A0-3C62B8F306E5 successfully disconnected from port .2340400-92233720368547758083292Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5248140n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3929262462-1284484791-1878375597-41753169938/28/2021 3:16:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EA33C97E-AEB7-4C8F-ADBC-F56F0148DEF8--1E1FED93-CEEE-4984-85A0-3C62B8F306E5 (Friendly Name: 427c4dea-9977-4192-b5e8-737eb8977f10) successfully connected to port 1553335B-4A10-47DE-A83B-A251C14E4466 (Friendly Name: 427c4dea-9977-4192-b5e8-737eb8977f10) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083291Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52485032n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3929262462-1284484791-1878375597-41753169938/28/2021 3:16:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EA33C97E-AEB7-4C8F-ADBC-F56F0148DEF8--1E1FED93-CEEE-4984-85A0-3C62B8F306E5 (Friendly Name: ).2330400-92233720368547758083290Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52485032n-h1-712140-11.cbci-712140-11.local8/28/2021 3:16:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403289Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:16:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0D2D861B-1C07-4C53-9BCF-D5AF90B312BD--9C702084-A9BE-4215-B961-8680E515E9D8 (Friendly Name: 10e4cbda-238b-4032-b475-1ddf833ba9fd).2330400-92233720368547758083288Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48004536n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-221087259-1280515079-2950025115-31721194408/28/2021 3:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0D2D861B-1C07-4C53-9BCF-D5AF90B312BD--9C702084-A9BE-4215-B961-8680E515E9D8 successfully disconnected from port .2340400-92233720368547758083287Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48004536n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-221087259-1280515079-2950025115-31721194408/28/2021 3:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 61B4B94F-8A93-438B-96F5-569245D127A1--F95DA93E-3191-4D0A-81F9-13208ADD559A (Friendly Name: 9faab5bc-8bf2-40f2-989e-8060dfc87853).2330400-92233720368547758083286Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37126116n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1639233871-1133218451-2455172502-27037412538/28/2021 3:16:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 61B4B94F-8A93-438B-96F5-569245D127A1--F95DA93E-3191-4D0A-81F9-13208ADD559A successfully disconnected from port .2340400-92233720368547758083285Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37126116n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1639233871-1133218451-2455172502-27037412538/28/2021 3:16:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0D2D861B-1C07-4C53-9BCF-D5AF90B312BD--9C702084-A9BE-4215-B961-8680E515E9D8 (Friendly Name: 10e4cbda-238b-4032-b475-1ddf833ba9fd) successfully connected to port A0139689-C3C9-4C7F-8DC1-6D064486C579 (Friendly Name: 10e4cbda-238b-4032-b475-1ddf833ba9fd) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083284Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48004536n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-221087259-1280515079-2950025115-31721194408/28/2021 3:16:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0D2D861B-1C07-4C53-9BCF-D5AF90B312BD--9C702084-A9BE-4215-B961-8680E515E9D8 (Friendly Name: ).2330400-92233720368547758083283Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48004536n-h1-712140-11.cbci-712140-11.local8/28/2021 3:16:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 9160782E-5816-4335-9AD1-CBAC9E54B847--85217F14-1F18-4115-8917-66F44E4E8B47 (Friendly Name: b9435f66-2834-4a1f-9c1a-de9126fa5887).2330400-92233720368547758083282Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55483388n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2439018542-1127569430-2899038618-12032626228/28/2021 3:16:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9160782E-5816-4335-9AD1-CBAC9E54B847--85217F14-1F18-4115-8917-66F44E4E8B47 successfully disconnected from port .2340400-92233720368547758083281Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55483388n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2439018542-1127569430-2899038618-12032626228/28/2021 3:16:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 61B4B94F-8A93-438B-96F5-569245D127A1--F95DA93E-3191-4D0A-81F9-13208ADD559A (Friendly Name: 9faab5bc-8bf2-40f2-989e-8060dfc87853) successfully connected to port 0DF1CBB9-BEB6-4660-A6B3-91272F1A23C3 (Friendly Name: 9faab5bc-8bf2-40f2-989e-8060dfc87853) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083280Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37125268n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1639233871-1133218451-2455172502-27037412538/28/2021 3:15:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 61B4B94F-8A93-438B-96F5-569245D127A1--F95DA93E-3191-4D0A-81F9-13208ADD559A (Friendly Name: ).2330400-92233720368547758083279Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37125268n-h1-712140-11.cbci-712140-11.local8/28/2021 3:15:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 310D693B-3FC9-45B9-8F85-0B4F3A285B1C--FA380564-B832-499E-A5CF-0082DF1AC0D1 (Friendly Name: 6f172856-1559-4e76-82b8-9855b584d9a5).2330400-92233720368547758083278Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31764752n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-822962491-1169768393-1326155151-4757361228/28/2021 3:15:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 310D693B-3FC9-45B9-8F85-0B4F3A285B1C--FA380564-B832-499E-A5CF-0082DF1AC0D1 successfully disconnected from port .2340400-92233720368547758083277Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31764752n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-822962491-1169768393-1326155151-4757361228/28/2021 3:15:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 310D693B-3FC9-45B9-8F85-0B4F3A285B1C--FA380564-B832-499E-A5CF-0082DF1AC0D1 (Friendly Name: 6f172856-1559-4e76-82b8-9855b584d9a5) successfully connected to port A7E2AC51-3B58-437E-8C8F-89C96B51D414 (Friendly Name: 6f172856-1559-4e76-82b8-9855b584d9a5) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083276Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31764156n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-822962491-1169768393-1326155151-4757361228/28/2021 3:15:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 310D693B-3FC9-45B9-8F85-0B4F3A285B1C--FA380564-B832-499E-A5CF-0082DF1AC0D1 (Friendly Name: ).2330400-92233720368547758083275Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31764156n-h1-712140-11.cbci-712140-11.local8/28/2021 3:15:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 84617FF5-B510-4B3B-B7C5-4AB05D29CF37--55CB85CD-B2A4-4036-8D41-5F987E1F66C1 (Friendly Name: e2309389-b095-4250-a8a2-56f0b5e00614).2330400-92233720368547758083274Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43885992n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2220982261-1262204176-2957690295-9363234218/28/2021 3:15:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 84617FF5-B510-4B3B-B7C5-4AB05D29CF37--55CB85CD-B2A4-4036-8D41-5F987E1F66C1 successfully disconnected from port .2340400-92233720368547758083273Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43885992n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2220982261-1262204176-2957690295-9363234218/28/2021 3:15:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 74874256-15A3-4F4F-922A-DE19F7C1B3F2--726DEA09-303C-46E2-A295-2FC8D551E778 (Friendly Name: ca8337db-cfc8-42a6-86e4-e405e97872bd).2330400-92233720368547758083272Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56804976n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1955021398-1330582947-433990290-40718668718/28/2021 3:14:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 74874256-15A3-4F4F-922A-DE19F7C1B3F2--726DEA09-303C-46E2-A295-2FC8D551E778 successfully disconnected from port .2340400-92233720368547758083271Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56804976n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1955021398-1330582947-433990290-40718668718/28/2021 3:14:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2DEB903E-D0AF-4B7E-9E7E-839C3BCB1724--E7E63040-7F5C-4E0E-A39C-7C526D71222B (Friendly Name: e86bdd47-a9b8-430a-b57d-bf82e418b896).2330400-92233720368547758083270Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59725960n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-770412606-1266602159-2625863326-6055391318/28/2021 3:14:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2DEB903E-D0AF-4B7E-9E7E-839C3BCB1724--E7E63040-7F5C-4E0E-A39C-7C526D71222B successfully disconnected from port .2340400-92233720368547758083269Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59725960n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-770412606-1266602159-2625863326-6055391318/28/2021 3:14:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 19BCE996-DDDB-42BC-831D-C85A7E9B81EF--884E93D4-D0B4-42D7-9C51-EF09B96BEBB8 (Friendly Name: 6f9cdee5-0f27-44d0-865f-5ea226b37b33).2330400-92233720368547758083268Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60244412n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-431810966-1119673819-1523064195-40182485748/28/2021 3:14:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 19BCE996-DDDB-42BC-831D-C85A7E9B81EF--884E93D4-D0B4-42D7-9C51-EF09B96BEBB8 successfully disconnected from port .2340400-92233720368547758083267Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60244412n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-431810966-1119673819-1523064195-40182485748/28/2021 3:14:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B73588C6-9653-4C21-A912-488C6D835C7C--B2A60405-DECE-475F-AFAF-A78A28B4A67F (Friendly Name: 89861e2b-f653-4b6b-9c51-131e9a564844) successfully connected to port 3761427C-D327-483F-AD1D-66E1ECAB3AF1 (Friendly Name: 89861e2b-f653-4b6b-9c51-131e9a564844) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083266Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42722572n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3073738950-1277269587-2353533609-20864377418/28/2021 3:14:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B73588C6-9653-4C21-A912-488C6D835C7C--B2A60405-DECE-475F-AFAF-A78A28B4A67F (Friendly Name: ).2330400-92233720368547758083265Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42722572n-h1-712140-11.cbci-712140-11.local8/28/2021 3:14:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 68EE77D9-EF2F-4A18-94CE-B747D2DFDBBC--8F610A40-5568-4BA8-8E46-B49EB2C57F1A (Friendly Name: 475bbcb6-44d4-498d-bd92-b67b6389a3e8).2330400-92233720368547758083264Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46285016n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1760458713-1243148079-1203228308-31685262908/28/2021 3:14:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 68EE77D9-EF2F-4A18-94CE-B747D2DFDBBC--8F610A40-5568-4BA8-8E46-B49EB2C57F1A successfully disconnected from port .2340400-92233720368547758083263Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46285016n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1760458713-1243148079-1203228308-31685262908/28/2021 3:14:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403262Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:14:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3D874B2C-DDDF-4964-B454-1735FC89F16A--BCAC8F06-086F-4E4F-9953-994B2A9762E5 (Friendly Name: 0f753eab-5968-4e80-b932-27a64347d0da).2330400-92233720368547758083261Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53925324n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1032276780-1231347167-890721460-17942143968/28/2021 3:14:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3D874B2C-DDDF-4964-B454-1735FC89F16A--BCAC8F06-086F-4E4F-9953-994B2A9762E5 successfully disconnected from port .2340400-92233720368547758083260Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53925324n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1032276780-1231347167-890721460-17942143968/28/2021 3:14:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9160782E-5816-4335-9AD1-CBAC9E54B847--85217F14-1F18-4115-8917-66F44E4E8B47 (Friendly Name: b9435f66-2834-4a1f-9c1a-de9126fa5887) successfully connected to port 2194561A-4409-48EA-80F9-12241E84A2F4 (Friendly Name: b9435f66-2834-4a1f-9c1a-de9126fa5887) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083259Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55484300n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2439018542-1127569430-2899038618-12032626228/28/2021 3:14:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 9160782E-5816-4335-9AD1-CBAC9E54B847--85217F14-1F18-4115-8917-66F44E4E8B47 (Friendly Name: ).2330400-92233720368547758083258Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55484300n-h1-712140-11.cbci-712140-11.local8/28/2021 3:14:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 74874256-15A3-4F4F-922A-DE19F7C1B3F2--726DEA09-303C-46E2-A295-2FC8D551E778 (Friendly Name: ca8337db-cfc8-42a6-86e4-e405e97872bd) successfully connected to port 2809FA42-6435-4397-A104-8AC4FBE6C6A5 (Friendly Name: ca8337db-cfc8-42a6-86e4-e405e97872bd) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083257Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56805784n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1955021398-1330582947-433990290-40718668718/28/2021 3:14:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 74874256-15A3-4F4F-922A-DE19F7C1B3F2--726DEA09-303C-46E2-A295-2FC8D551E778 (Friendly Name: ).2330400-92233720368547758083256Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56805784n-h1-712140-11.cbci-712140-11.local8/28/2021 3:14:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 19BCE996-DDDB-42BC-831D-C85A7E9B81EF--884E93D4-D0B4-42D7-9C51-EF09B96BEBB8 (Friendly Name: 6f9cdee5-0f27-44d0-865f-5ea226b37b33) successfully connected to port F6ED627B-0562-420E-99FC-1312CCCB96C0 (Friendly Name: 6f9cdee5-0f27-44d0-865f-5ea226b37b33) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083255Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60244268n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-431810966-1119673819-1523064195-40182485748/28/2021 3:14:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 19BCE996-DDDB-42BC-831D-C85A7E9B81EF--884E93D4-D0B4-42D7-9C51-EF09B96BEBB8 (Friendly Name: ).2330400-92233720368547758083254Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60244268n-h1-712140-11.cbci-712140-11.local8/28/2021 3:14:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403253Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:14:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403252Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:14:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 891441A7-062F-43AB-8BDD-686F10845022--E8B55BA4-ED0D-4C46-8E63-D120313BD238 (Friendly Name: b492e013-47ef-4820-bb5a-e8c7a71ba9a0).2330400-92233720368547758083251Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9324488n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2299806119-1135281711-1869143435-5757020328/28/2021 3:13:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 891441A7-062F-43AB-8BDD-686F10845022--E8B55BA4-ED0D-4C46-8E63-D120313BD238 successfully disconnected from port .2340400-92233720368547758083250Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9324488n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2299806119-1135281711-1869143435-5757020328/28/2021 3:13:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 499E2B86-CFE5-424F-A199-ECC4D071D1B5--B9049E0C-D054-43E7-A22E-59D16789128E (Friendly Name: 305730f3-a5f4-4408-bb10-afa9f1fa260c).2330400-92233720368547758083249Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51404236n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1235102598-1112526821-3303840161-30504022568/28/2021 3:13:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 499E2B86-CFE5-424F-A199-ECC4D071D1B5--B9049E0C-D054-43E7-A22E-59D16789128E successfully disconnected from port .2340400-92233720368547758083248Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51404236n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1235102598-1112526821-3303840161-30504022568/28/2021 3:13:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A7BBE499-AFEF-44D8-BFF9-0A2A34C3389B--8FDECED7-5C73-4E69-A89C-40D5DE73E5DD (Friendly Name: ca8337db-cfc8-42a6-86e4-e405e97872bd).2330400-92233720368547758083247Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54521360n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2814108825-1155051503-705362367-26041884688/28/2021 3:13:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A7BBE499-AFEF-44D8-BFF9-0A2A34C3389B--8FDECED7-5C73-4E69-A89C-40D5DE73E5DD successfully disconnected from port .2340400-92233720368547758083246Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54521360n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2814108825-1155051503-705362367-26041884688/28/2021 3:13:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 499E2B86-CFE5-424F-A199-ECC4D071D1B5--B9049E0C-D054-43E7-A22E-59D16789128E (Friendly Name: 305730f3-a5f4-4408-bb10-afa9f1fa260c) successfully connected to port BAD8812E-5067-40E7-A2FB-325856020244 (Friendly Name: 305730f3-a5f4-4408-bb10-afa9f1fa260c) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083245Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51404236n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1235102598-1112526821-3303840161-30504022568/28/2021 3:13:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 499E2B86-CFE5-424F-A199-ECC4D071D1B5--B9049E0C-D054-43E7-A22E-59D16789128E (Friendly Name: ).2330400-92233720368547758083244Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51404236n-h1-712140-11.cbci-712140-11.local8/28/2021 3:13:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3D874B2C-DDDF-4964-B454-1735FC89F16A--BCAC8F06-086F-4E4F-9953-994B2A9762E5 (Friendly Name: 0f753eab-5968-4e80-b932-27a64347d0da) successfully connected to port 0C893BE6-13DD-4BCB-8400-048B989A3E7E (Friendly Name: 0f753eab-5968-4e80-b932-27a64347d0da) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083243Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53925324n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1032276780-1231347167-890721460-17942143968/28/2021 3:13:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3D874B2C-DDDF-4964-B454-1735FC89F16A--BCAC8F06-086F-4E4F-9953-994B2A9762E5 (Friendly Name: ).2330400-92233720368547758083242Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53925324n-h1-712140-11.cbci-712140-11.local8/28/2021 3:13:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 891441A7-062F-43AB-8BDD-686F10845022--E8B55BA4-ED0D-4C46-8E63-D120313BD238 (Friendly Name: b492e013-47ef-4820-bb5a-e8c7a71ba9a0) successfully connected to port D6979C58-AE4E-4639-A7B9-665D9A80B2C1 (Friendly Name: b492e013-47ef-4820-bb5a-e8c7a71ba9a0) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083241Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9324768n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2299806119-1135281711-1869143435-5757020328/28/2021 3:13:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 891441A7-062F-43AB-8BDD-686F10845022--E8B55BA4-ED0D-4C46-8E63-D120313BD238 (Friendly Name: ).2330400-92233720368547758083240Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9324768n-h1-712140-11.cbci-712140-11.local8/28/2021 3:13:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A7BBE499-AFEF-44D8-BFF9-0A2A34C3389B--8FDECED7-5C73-4E69-A89C-40D5DE73E5DD (Friendly Name: ca8337db-cfc8-42a6-86e4-e405e97872bd) successfully connected to port C1ECFA4B-ADDD-44A2-9485-3C956127845E (Friendly Name: ca8337db-cfc8-42a6-86e4-e405e97872bd) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083239Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54525424n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2814108825-1155051503-705362367-26041884688/28/2021 3:13:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A7BBE499-AFEF-44D8-BFF9-0A2A34C3389B--8FDECED7-5C73-4E69-A89C-40D5DE73E5DD (Friendly Name: ).2330400-92233720368547758083238Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54525424n-h1-712140-11.cbci-712140-11.local8/28/2021 3:13:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F97C3A02-6B2D-45B2-A3A7-D7DB7A2FD9D4--93B9DA9F-98B0-493A-A88D-934681AFD225 (Friendly Name: e9e38cda-7a18-46b0-88a4-10743d5d99e2).2330400-92233720368547758083237Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49364772n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4185668098-1169320749-3688343459-35710032588/28/2021 3:13:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F97C3A02-6B2D-45B2-A3A7-D7DB7A2FD9D4--93B9DA9F-98B0-493A-A88D-934681AFD225 successfully disconnected from port .2340400-92233720368547758083236Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49364772n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4185668098-1169320749-3688343459-35710032588/28/2021 3:13:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0CBF8D96-9CEC-4228-BFC7-FD4E1762B849--19CD6C6B-ED06-42E9-ACB3-FCD3CAD95ADD (Friendly Name: ca8337db-cfc8-42a6-86e4-e405e97872bd).2330400-92233720368547758083235Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61325156n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-213880214-1109957868-1325254591-12368205038/28/2021 3:13:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0CBF8D96-9CEC-4228-BFC7-FD4E1762B849--19CD6C6B-ED06-42E9-ACB3-FCD3CAD95ADD successfully disconnected from port .2340400-92233720368547758083234Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61325156n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-213880214-1109957868-1325254591-12368205038/28/2021 3:13:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BDA11404-E24B-4819-9BBC-BE485C08AB98--15550018-726E-4F47-AD7A-66A4FB236238 (Friendly Name: cbfc4ee1-df1e-4ce5-a7fc-62669f374b42).2330400-92233720368547758083233Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46004312n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3181450244-1209655883-1220459675-25613456288/28/2021 3:12:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BDA11404-E24B-4819-9BBC-BE485C08AB98--15550018-726E-4F47-AD7A-66A4FB236238 successfully disconnected from port .2340400-92233720368547758083232Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46004312n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3181450244-1209655883-1220459675-25613456288/28/2021 3:12:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 8872397A-FA9A-4B07-8DF6-5A18D9E59D36--0C3322F1-6CC5-4F0C-8260-2866F24AC480 (Friendly Name: d5f36d26-fd14-42b1-a385-895cb93d2c88).2330400-92233720368547758083231Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17764660n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2289187194-1258814106-408614541-9163176578/28/2021 3:12:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8872397A-FA9A-4B07-8DF6-5A18D9E59D36--0C3322F1-6CC5-4F0C-8260-2866F24AC480 successfully disconnected from port .2340400-92233720368547758083230Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17764660n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2289187194-1258814106-408614541-9163176578/28/2021 3:12:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 68EE77D9-EF2F-4A18-94CE-B747D2DFDBBC--8F610A40-5568-4BA8-8E46-B49EB2C57F1A (Friendly Name: 475bbcb6-44d4-498d-bd92-b67b6389a3e8) successfully connected to port 91052DE9-A247-4C0D-A6DE-35270F325E5A (Friendly Name: 475bbcb6-44d4-498d-bd92-b67b6389a3e8) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083229Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46284380n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1760458713-1243148079-1203228308-31685262908/28/2021 3:12:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 68EE77D9-EF2F-4A18-94CE-B747D2DFDBBC--8F610A40-5568-4BA8-8E46-B49EB2C57F1A (Friendly Name: ).2330400-92233720368547758083228Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46284380n-h1-712140-11.cbci-712140-11.local8/28/2021 3:12:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F97C3A02-6B2D-45B2-A3A7-D7DB7A2FD9D4--93B9DA9F-98B0-493A-A88D-934681AFD225 (Friendly Name: e9e38cda-7a18-46b0-88a4-10743d5d99e2) successfully connected to port B80B8108-4EEE-4CD3-AAC8-11D7E3DF9E93 (Friendly Name: e9e38cda-7a18-46b0-88a4-10743d5d99e2) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083227Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49365180n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4185668098-1169320749-3688343459-35710032588/28/2021 3:12:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F97C3A02-6B2D-45B2-A3A7-D7DB7A2FD9D4--93B9DA9F-98B0-493A-A88D-934681AFD225 (Friendly Name: ).2330400-92233720368547758083226Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49365180n-h1-712140-11.cbci-712140-11.local8/28/2021 3:12:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 84617FF5-B510-4B3B-B7C5-4AB05D29CF37--55CB85CD-B2A4-4036-8D41-5F987E1F66C1 (Friendly Name: e2309389-b095-4250-a8a2-56f0b5e00614) successfully connected to port 163F934B-2EA4-4190-B7A2-A9D69ADE7D70 (Friendly Name: e2309389-b095-4250-a8a2-56f0b5e00614) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083225Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43885244n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2220982261-1262204176-2957690295-9363234218/28/2021 3:12:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 84617FF5-B510-4B3B-B7C5-4AB05D29CF37--55CB85CD-B2A4-4036-8D41-5F987E1F66C1 (Friendly Name: ).2330400-92233720368547758083224Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43885244n-h1-712140-11.cbci-712140-11.local8/28/2021 3:12:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Registry service entered the stopped state.7036016384400-91873432398358118403223Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:12:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D0D8168E-36BA-4894-9121-0D0B983FC3C2--49A4937C-F40A-4416-9F0F-DDA8050B5D85 (Friendly Name: 1c37a74c-17a5-4186-bb99-db58b35c1d32).2330400-92233720368547758083222Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58526000n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3503822478-1217672890-185409937-32675757048/28/2021 3:12:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D0D8168E-36BA-4894-9121-0D0B983FC3C2--49A4937C-F40A-4416-9F0F-DDA8050B5D85 successfully disconnected from port .2340400-92233720368547758083221Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58526000n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3503822478-1217672890-185409937-32675757048/28/2021 3:12:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2DEB903E-D0AF-4B7E-9E7E-839C3BCB1724--E7E63040-7F5C-4E0E-A39C-7C526D71222B (Friendly Name: e86bdd47-a9b8-430a-b57d-bf82e418b896) successfully connected to port A5B623F2-E264-43C2-B531-99EB657E0F18 (Friendly Name: e86bdd47-a9b8-430a-b57d-bf82e418b896) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083220Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59726048n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-770412606-1266602159-2625863326-6055391318/28/2021 3:12:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2DEB903E-D0AF-4B7E-9E7E-839C3BCB1724--E7E63040-7F5C-4E0E-A39C-7C526D71222B (Friendly Name: ).2330400-92233720368547758083219Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59726048n-h1-712140-11.cbci-712140-11.local8/28/2021 3:12:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0CBF8D96-9CEC-4228-BFC7-FD4E1762B849--19CD6C6B-ED06-42E9-ACB3-FCD3CAD95ADD (Friendly Name: ca8337db-cfc8-42a6-86e4-e405e97872bd) successfully connected to port E278DE48-7748-4C8F-836D-5B913D263AC4 (Friendly Name: ca8337db-cfc8-42a6-86e4-e405e97872bd) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083218Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61325156n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-213880214-1109957868-1325254591-12368205038/28/2021 3:12:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0CBF8D96-9CEC-4228-BFC7-FD4E1762B849--19CD6C6B-ED06-42E9-ACB3-FCD3CAD95ADD (Friendly Name: ).2330400-92233720368547758083217Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61325156n-h1-712140-11.cbci-712140-11.local8/28/2021 3:12:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403216Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:12:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403215Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:12:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D0D8168E-36BA-4894-9121-0D0B983FC3C2--49A4937C-F40A-4416-9F0F-DDA8050B5D85 (Friendly Name: 1c37a74c-17a5-4186-bb99-db58b35c1d32) successfully connected to port DA9C0FC2-EAC9-49FA-8E55-A219D333B3A9 (Friendly Name: 1c37a74c-17a5-4186-bb99-db58b35c1d32) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083214Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58526000n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3503822478-1217672890-185409937-32675757048/28/2021 3:12:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D0D8168E-36BA-4894-9121-0D0B983FC3C2--49A4937C-F40A-4416-9F0F-DDA8050B5D85 (Friendly Name: ).2330400-92233720368547758083213Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58526000n-h1-712140-11.cbci-712140-11.local8/28/2021 3:12:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CBB9BF29-04CB-4C0A-9F83-332DC3507D16--1463FDB9-1260-4C1E-9380-5C40BCD56AC8 (Friendly Name: a8db1667-b702-42e0-8ed8-bbb0bbd86919).2330400-92233720368547758083212Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9402456n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3417947945-1275725003-758350751-3773114278/28/2021 3:12:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CBB9BF29-04CB-4C0A-9F83-332DC3507D16--1463FDB9-1260-4C1E-9380-5C40BCD56AC8 successfully disconnected from port .2340400-92233720368547758083211Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9402456n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3417947945-1275725003-758350751-3773114278/28/2021 3:12:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B0A66875-87D7-4119-801D-CF8242674004--0449CA50-936D-40C0-8AFD-943FB94A7EE6 (Friendly Name: 8100867d-48ce-4453-a76a-108ca062145b).2330400-92233720368547758083210Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57405756n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2963695733-1092192215-2194611584-713296028/28/2021 3:12:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B0A66875-87D7-4119-801D-CF8242674004--0449CA50-936D-40C0-8AFD-943FB94A7EE6 successfully disconnected from port .2340400-92233720368547758083209Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57405756n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2963695733-1092192215-2194611584-713296028/28/2021 3:12:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3238C28F-9D43-4668-B34D-4C960D78A640--856AB700-818E-4083-AFF5-4A7845C80A0E (Friendly Name: c019a672-2f7a-49ea-985e-ebba83e6de79).2330400-92233720368547758083208Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6002684n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-842580623-1181261123-2521583027-10846515338/28/2021 3:11:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3238C28F-9D43-4668-B34D-4C960D78A640--856AB700-818E-4083-AFF5-4A7845C80A0E successfully disconnected from port .2340400-92233720368547758083207Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6002684n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-842580623-1181261123-2521583027-10846515338/28/2021 3:11:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B0A66875-87D7-4119-801D-CF8242674004--0449CA50-936D-40C0-8AFD-943FB94A7EE6 (Friendly Name: 8100867d-48ce-4453-a76a-108ca062145b) successfully connected to port 290CC75E-5280-4282-B8B3-C4CC7CFC3081 (Friendly Name: 8100867d-48ce-4453-a76a-108ca062145b) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083206Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57405716n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2963695733-1092192215-2194611584-713296028/28/2021 3:11:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B0A66875-87D7-4119-801D-CF8242674004--0449CA50-936D-40C0-8AFD-943FB94A7EE6 (Friendly Name: ).2330400-92233720368547758083205Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57405716n-h1-712140-11.cbci-712140-11.local8/28/2021 3:11:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 16359776-13A1-475C-B373-A8EFB7A8A50C--33ECEE04-EE78-48D8-9B92-06EA975D82E6 (Friendly Name: ef5e8b32-6f6b-4ca0-9265-5dd30a1b0046).2330400-92233720368547758083204Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42364152n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-372610934-1197216673-4020794291-2121832238/28/2021 3:11:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 16359776-13A1-475C-B373-A8EFB7A8A50C--33ECEE04-EE78-48D8-9B92-06EA975D82E6 successfully disconnected from port .2340400-92233720368547758083203Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42364152n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-372610934-1197216673-4020794291-2121832238/28/2021 3:11:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 41DEF423-4E32-4B9C-8768-4B79ABDF6643--D082504C-F693-4F81-A182-32C877A26AF0 (Friendly Name: 971ccb03-2d03-4d98-adf9-702312bf91b6).2330400-92233720368547758083202Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51125080n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1105130531-1268534834-2034985095-11308154038/28/2021 3:11:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 41DEF423-4E32-4B9C-8768-4B79ABDF6643--D082504C-F693-4F81-A182-32C877A26AF0 successfully disconnected from port .2340400-92233720368547758083201Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51125080n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1105130531-1268534834-2034985095-11308154038/28/2021 3:11:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 006055F9-2F32-4FFC-A4A0-EB23A0838B56--EF3CAF87-7995-459E-A652-BF2F50653CDD (Friendly Name: 484abe65-7518-49bf-99b2-d129a21e7f57).2330400-92233720368547758083200Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19124456n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-6313465-1341927218-602644644-14519837768/28/2021 3:11:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 006055F9-2F32-4FFC-A4A0-EB23A0838B56--EF3CAF87-7995-459E-A652-BF2F50653CDD successfully disconnected from port .2340400-92233720368547758083199Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19124456n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-6313465-1341927218-602644644-14519837768/28/2021 3:11:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 32CF8494-0E65-4CB7-AE84-9DF52BCA48D6--6A8FA801-FF65-4BB5-B431-23B714E820F2 (Friendly Name: 5ff8857f-4c11-48f1-991a-569805de36d1).2330400-92233720368547758083198Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53845496n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-852460692-1287065189-4120741038-35950945718/28/2021 3:11:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 32CF8494-0E65-4CB7-AE84-9DF52BCA48D6--6A8FA801-FF65-4BB5-B431-23B714E820F2 successfully disconnected from port .2340400-92233720368547758083197Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53845496n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-852460692-1287065189-4120741038-35950945718/28/2021 3:11:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B349B6CB-BD2F-4022-9ABF-CE45757825BE--B55D1B16-0A6E-477D-80B5-5420EEA3CB06 (Friendly Name: 58455377-d992-4e72-9d08-1953f4afe447).2330400-92233720368547758083196Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40482820n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3007952587-1076018479-1171177370-31901267098/28/2021 3:11:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B349B6CB-BD2F-4022-9ABF-CE45757825BE--B55D1B16-0A6E-477D-80B5-5420EEA3CB06 successfully disconnected from port .2340400-92233720368547758083195Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40482820n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3007952587-1076018479-1171177370-31901267098/28/2021 3:11:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 97CA276F-230D-4B7D-B285-E3B35062E943--FA1D5023-6403-4044-9CA6-C62A20E9B28F (Friendly Name: 73c13967-9ddd-4fb2-9daa-79e9981d70a0).2330400-92233720368547758083194Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27644440n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2546607983-1266492173-3018032562-11393685288/28/2021 3:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 97CA276F-230D-4B7D-B285-E3B35062E943--FA1D5023-6403-4044-9CA6-C62A20E9B28F successfully disconnected from port .2340400-92233720368547758083193Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27644440n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2546607983-1266492173-3018032562-11393685288/28/2021 3:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-79-93-6E has moved from port 66D7AD76-C2A3-491B-8293-CB436FE7CCC1 (Friendly Name: 73c13967-9ddd-4fb2-9daa-79e9981d70a0) to port 66D7AD76-C2A3-491B-8293-CB436FE7CCC1 (Friendly Name: 73c13967-9ddd-4fb2-9daa-79e9981d70a0).250410180-92233720368547758083192Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25402804n-h1-712140-11.cbci-712140-11.local8/28/2021 3:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 4D1D9F1F-E9A9-4140-877A-EC5FACAE33A7--4B5832E6-C74A-4E3D-B893-CB4BB5555CD5 (Friendly Name: 697149d2-18b9-4c7a-8d76-70e5add49a9d).2330400-92233720368547758083191Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13205188n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1293786911-1094773161-1609333383-28051821248/28/2021 3:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4D1D9F1F-E9A9-4140-877A-EC5FACAE33A7--4B5832E6-C74A-4E3D-B893-CB4BB5555CD5 successfully disconnected from port .2340400-92233720368547758083190Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13205188n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1293786911-1094773161-1609333383-28051821248/28/2021 3:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 97CA276F-230D-4B7D-B285-E3B35062E943--FA1D5023-6403-4044-9CA6-C62A20E9B28F (Friendly Name: 73c13967-9ddd-4fb2-9daa-79e9981d70a0) successfully connected to port 66D7AD76-C2A3-491B-8293-CB436FE7CCC1 (Friendly Name: 73c13967-9ddd-4fb2-9daa-79e9981d70a0) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083189Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27643340n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2546607983-1266492173-3018032562-11393685288/28/2021 3:11:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403188Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h1-712140-11.cbci-712140-11.local8/28/2021 3:11:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 97CA276F-230D-4B7D-B285-E3B35062E943--FA1D5023-6403-4044-9CA6-C62A20E9B28F (Friendly Name: ).2330400-92233720368547758083187Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27644440n-h1-712140-11.cbci-712140-11.local8/28/2021 3:11:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 745E4712-2DA8-4657-8A68-6D9DB56E789E--FE2F8A65-0AF9-4AD9-9DEB-5E0FF8401B0B (Friendly Name: 88419c5c-5c2c-45ce-82dc-f7888d195e85).2330400-92233720368547758083186Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51925260n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1952335634-1180118440-2641193098-26586927898/28/2021 3:11:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 745E4712-2DA8-4657-8A68-6D9DB56E789E--FE2F8A65-0AF9-4AD9-9DEB-5E0FF8401B0B successfully disconnected from port .2340400-92233720368547758083185Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51925260n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1952335634-1180118440-2641193098-26586927898/28/2021 3:11:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4D1D9F1F-E9A9-4140-877A-EC5FACAE33A7--4B5832E6-C74A-4E3D-B893-CB4BB5555CD5 (Friendly Name: 697149d2-18b9-4c7a-8d76-70e5add49a9d) successfully connected to port 051B4F49-84E9-4C3C-B86A-5AED5E119D0F (Friendly Name: 697149d2-18b9-4c7a-8d76-70e5add49a9d) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083184Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13204764n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1293786911-1094773161-1609333383-28051821248/28/2021 3:11:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 4D1D9F1F-E9A9-4140-877A-EC5FACAE33A7--4B5832E6-C74A-4E3D-B893-CB4BB5555CD5 (Friendly Name: ).2330400-92233720368547758083183Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13204764n-h1-712140-11.cbci-712140-11.local8/28/2021 3:11:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic ABE4C4B2-778F-4B0C-ACBA-8403FB304951--5054591C-48AA-49C0-9B93-AC36CD5D0A3B (Friendly Name: 73c13967-9ddd-4fb2-9daa-79e9981d70a0).2330400-92233720368547758083182Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58725936n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2883896498-1259108239-59030188-13637511638/28/2021 3:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC ABE4C4B2-778F-4B0C-ACBA-8403FB304951--5054591C-48AA-49C0-9B93-AC36CD5D0A3B successfully disconnected from port .2340400-92233720368547758083181Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58725936n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2883896498-1259108239-59030188-13637511638/28/2021 3:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0F62A3F2-43D5-4E64-87A7-AEBD957AED8F--1BF60ACF-82E1-42B8-80E1-25B093CFE1C6 (Friendly Name: 43a2ae37-5f66-4828-ab7b-221d0c948957).2330400-92233720368547758083180Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60606084n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-258122738-1315193813-3182339975-24147053018/28/2021 3:10:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0F62A3F2-43D5-4E64-87A7-AEBD957AED8F--1BF60ACF-82E1-42B8-80E1-25B093CFE1C6 successfully disconnected from port .2340400-92233720368547758083179Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60606084n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-258122738-1315193813-3182339975-24147053018/28/2021 3:10:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0F62A3F2-43D5-4E64-87A7-AEBD957AED8F--1BF60ACF-82E1-42B8-80E1-25B093CFE1C6 (Friendly Name: 43a2ae37-5f66-4828-ab7b-221d0c948957) successfully connected to port ADBC9BFE-E8CC-45A7-9CB1-775F462BF52C (Friendly Name: 43a2ae37-5f66-4828-ab7b-221d0c948957) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083178Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60606084n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-258122738-1315193813-3182339975-24147053018/28/2021 3:10:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0F62A3F2-43D5-4E64-87A7-AEBD957AED8F--1BF60ACF-82E1-42B8-80E1-25B093CFE1C6 (Friendly Name: ).2330400-92233720368547758083177Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60606084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:10:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F3382597-5B64-4956-8CE6-0C223B1F323D--9740DA7D-44BA-44B2-A0BF-0C08413F1D1D (Friendly Name: 83ffd15e-1b01-48d6-9197-10f1f04c5da7).2330400-92233720368547758083176Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14843508n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4080543127-1230396260-571270796-10266949718/28/2021 3:10:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F3382597-5B64-4956-8CE6-0C223B1F323D--9740DA7D-44BA-44B2-A0BF-0C08413F1D1D successfully disconnected from port .2340400-92233720368547758083175Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14843508n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4080543127-1230396260-571270796-10266949718/28/2021 3:10:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC ABE4C4B2-778F-4B0C-ACBA-8403FB304951--5054591C-48AA-49C0-9B93-AC36CD5D0A3B (Friendly Name: 73c13967-9ddd-4fb2-9daa-79e9981d70a0) successfully connected to port CC4B6913-78BE-40BE-8548-88D619E9307C (Friendly Name: 73c13967-9ddd-4fb2-9daa-79e9981d70a0) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083174Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58725896n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2883896498-1259108239-59030188-13637511638/28/2021 3:10:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic ABE4C4B2-778F-4B0C-ACBA-8403FB304951--5054591C-48AA-49C0-9B93-AC36CD5D0A3B (Friendly Name: ).2330400-92233720368547758083173Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58725896n-h1-712140-11.cbci-712140-11.local8/28/2021 3:10:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403172Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:10:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403171Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:10:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-14-58-1D has moved from port 29C52E67-CAC1-4682-AAF8-5A2CE2ECE238 (Friendly Name: 5ff8857f-4c11-48f1-991a-569805de36d1) to port 29C52E67-CAC1-4682-AAF8-5A2CE2ECE238 (Friendly Name: 5ff8857f-4c11-48f1-991a-569805de36d1).250410180-92233720368547758083170Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25404128n-h1-712140-11.cbci-712140-11.local8/28/2021 3:10:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 32CF8494-0E65-4CB7-AE84-9DF52BCA48D6--6A8FA801-FF65-4BB5-B431-23B714E820F2 (Friendly Name: 5ff8857f-4c11-48f1-991a-569805de36d1) successfully connected to port 29C52E67-CAC1-4682-AAF8-5A2CE2ECE238 (Friendly Name: 5ff8857f-4c11-48f1-991a-569805de36d1) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083169Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53845408n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-852460692-1287065189-4120741038-35950945718/28/2021 3:10:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 32CF8494-0E65-4CB7-AE84-9DF52BCA48D6--6A8FA801-FF65-4BB5-B431-23B714E820F2 (Friendly Name: ).2330400-92233720368547758083168Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53845412n-h1-712140-11.cbci-712140-11.local8/28/2021 3:09:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 54AF6619-EE73-458E-8685-B8FCCD94E27A--FEA85E8D-8C66-4585-953F-4F0D2AF756A8 (Friendly Name: 5ff8857f-4c11-48f1-991a-569805de36d1).2330400-92233720368547758083167Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45284548n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1420781081-1166995059-4239951238-20616695818/28/2021 3:09:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 54AF6619-EE73-458E-8685-B8FCCD94E27A--FEA85E8D-8C66-4585-953F-4F0D2AF756A8 successfully disconnected from port .2340400-92233720368547758083166Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45284548n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1420781081-1166995059-4239951238-20616695818/28/2021 3:09:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-B9-B5-1C has moved from port 7AAC756B-3343-4A88-B626-8725FDDBAFA8 (Friendly Name: br-data_External) to port 58CF1604-3D1B-456F-9BE6-6EBC2AEC1B24 (Friendly Name: ef5e8b32-6f6b-4ca0-9265-5dd30a1b0046).250410180-92233720368547758083165Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45283668n-h1-712140-11.cbci-712140-11.local8/28/2021 3:09:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 16359776-13A1-475C-B373-A8EFB7A8A50C--33ECEE04-EE78-48D8-9B92-06EA975D82E6 (Friendly Name: ef5e8b32-6f6b-4ca0-9265-5dd30a1b0046) successfully connected to port 58CF1604-3D1B-456F-9BE6-6EBC2AEC1B24 (Friendly Name: ef5e8b32-6f6b-4ca0-9265-5dd30a1b0046) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083164Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42362468n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-372610934-1197216673-4020794291-2121832238/28/2021 3:09:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 16359776-13A1-475C-B373-A8EFB7A8A50C--33ECEE04-EE78-48D8-9B92-06EA975D82E6 (Friendly Name: ).2330400-92233720368547758083163Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42362468n-h1-712140-11.cbci-712140-11.local8/28/2021 3:09:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 745E4712-2DA8-4657-8A68-6D9DB56E789E--FE2F8A65-0AF9-4AD9-9DEB-5E0FF8401B0B (Friendly Name: 88419c5c-5c2c-45ce-82dc-f7888d195e85) successfully connected to port 8ED46004-14DC-4BC7-AC64-DABD38C3039E (Friendly Name: 88419c5c-5c2c-45ce-82dc-f7888d195e85) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083162Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51925216n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1952335634-1180118440-2641193098-26586927898/28/2021 3:09:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 745E4712-2DA8-4657-8A68-6D9DB56E789E--FE2F8A65-0AF9-4AD9-9DEB-5E0FF8401B0B (Friendly Name: ).2330400-92233720368547758083161Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51925216n-h1-712140-11.cbci-712140-11.local8/28/2021 3:09:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403160Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:09:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403159Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:09:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the running state.7036016384400-91873432398358118403158Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:09:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403157Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:09:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403156Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:09:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 54AF6619-EE73-458E-8685-B8FCCD94E27A--FEA85E8D-8C66-4585-953F-4F0D2AF756A8 (Friendly Name: 5ff8857f-4c11-48f1-991a-569805de36d1) successfully connected to port 6F934919-2615-407B-829F-391D0B0D4ACE (Friendly Name: 5ff8857f-4c11-48f1-991a-569805de36d1) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083155Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45284548n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1420781081-1166995059-4239951238-20616695818/28/2021 3:09:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 54AF6619-EE73-458E-8685-B8FCCD94E27A--FEA85E8D-8C66-4585-953F-4F0D2AF756A8 (Friendly Name: ).2330400-92233720368547758083154Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45284548n-h1-712140-11.cbci-712140-11.local8/28/2021 3:09:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8872397A-FA9A-4B07-8DF6-5A18D9E59D36--0C3322F1-6CC5-4F0C-8260-2866F24AC480 (Friendly Name: d5f36d26-fd14-42b1-a385-895cb93d2c88) successfully connected to port 7BDF030D-E96D-48EC-98BB-DE36580D8067 (Friendly Name: d5f36d26-fd14-42b1-a385-895cb93d2c88) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083153Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem177688n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2289187194-1258814106-408614541-9163176578/28/2021 3:08:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 8872397A-FA9A-4B07-8DF6-5A18D9E59D36--0C3322F1-6CC5-4F0C-8260-2866F24AC480 (Friendly Name: ).2330400-92233720368547758083152Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem177688n-h1-712140-11.cbci-712140-11.local8/28/2021 3:08:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403151Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:08:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403150Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:08:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F3382597-5B64-4956-8CE6-0C223B1F323D--9740DA7D-44BA-44B2-A0BF-0C08413F1D1D (Friendly Name: 83ffd15e-1b01-48d6-9197-10f1f04c5da7) successfully connected to port CF7CF3EA-BAF3-43D3-95B5-64B1197ADCA0 (Friendly Name: 83ffd15e-1b01-48d6-9197-10f1f04c5da7) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083149Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14844084n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-4080543127-1230396260-571270796-10266949718/28/2021 3:08:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F3382597-5B64-4956-8CE6-0C223B1F323D--9740DA7D-44BA-44B2-A0BF-0C08413F1D1D (Friendly Name: ).2330400-92233720368547758083148Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14844084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:08:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-69-75-8B has moved from port A71899A3-EE41-423C-986D-8A290FFAFD5B (Friendly Name: 484abe65-7518-49bf-99b2-d129a21e7f57) to port A71899A3-EE41-423C-986D-8A290FFAFD5B (Friendly Name: 484abe65-7518-49bf-99b2-d129a21e7f57).250410180-92233720368547758083147Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25404132n-h1-712140-11.cbci-712140-11.local8/28/2021 3:08:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 006055F9-2F32-4FFC-A4A0-EB23A0838B56--EF3CAF87-7995-459E-A652-BF2F50653CDD (Friendly Name: 484abe65-7518-49bf-99b2-d129a21e7f57) successfully connected to port A71899A3-EE41-423C-986D-8A290FFAFD5B (Friendly Name: 484abe65-7518-49bf-99b2-d129a21e7f57) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083146Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19124456n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-6313465-1341927218-602644644-14519837768/28/2021 3:08:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B349B6CB-BD2F-4022-9ABF-CE45757825BE--B55D1B16-0A6E-477D-80B5-5420EEA3CB06 (Friendly Name: 58455377-d992-4e72-9d08-1953f4afe447) successfully connected to port 6D08111D-C243-4D43-BB8C-4E4FAFCF9357 (Friendly Name: 58455377-d992-4e72-9d08-1953f4afe447) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083145Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40482772n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3007952587-1076018479-1171177370-31901267098/28/2021 3:08:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B349B6CB-BD2F-4022-9ABF-CE45757825BE--B55D1B16-0A6E-477D-80B5-5420EEA3CB06 (Friendly Name: ).2330400-92233720368547758083144Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40482772n-h1-712140-11.cbci-712140-11.local8/28/2021 3:08:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 006055F9-2F32-4FFC-A4A0-EB23A0838B56--EF3CAF87-7995-459E-A652-BF2F50653CDD (Friendly Name: ).2330400-92233720368547758083143Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem19124444n-h1-712140-11.cbci-712140-11.local8/28/2021 3:08:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AB479DE5-77E2-422D-9023-E98700D1CB40--9778A0AD-35B6-4981-910F-491792C9D53D (Friendly Name: d1d85754-721c-4176-92a6-4ae06c906ed6).2330400-92233720368547758083142Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36363884n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2873597413-1110276066-2280203152-10870991368/28/2021 3:08:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AB479DE5-77E2-422D-9023-E98700D1CB40--9778A0AD-35B6-4981-910F-491792C9D53D successfully disconnected from port .2340400-92233720368547758083141Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36363884n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2873597413-1110276066-2280203152-10870991368/28/2021 3:08:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E44D8891-A596-474A-BBBC-EC522A45B4D9--A94B1CFB-72DF-4A43-B94B-8099BB88F1BD (Friendly Name: d8361302-8401-4b6c-8ae6-43555f006a46).2330400-92233720368547758083140Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33404308n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3830286481-1196074390-1391246523-36524700588/28/2021 3:08:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E44D8891-A596-474A-BBBC-EC522A45B4D9--A94B1CFB-72DF-4A43-B94B-8099BB88F1BD successfully disconnected from port .2340400-92233720368547758083139Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33404308n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3830286481-1196074390-1391246523-36524700588/28/2021 3:08:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3238C28F-9D43-4668-B34D-4C960D78A640--856AB700-818E-4083-AFF5-4A7845C80A0E (Friendly Name: c019a672-2f7a-49ea-985e-ebba83e6de79) successfully connected to port 48118E3E-A296-41F7-ABCA-9B842CC724EB (Friendly Name: c019a672-2f7a-49ea-985e-ebba83e6de79) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083138Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6005088n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-842580623-1181261123-2521583027-10846515338/28/2021 3:08:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3238C28F-9D43-4668-B34D-4C960D78A640--856AB700-818E-4083-AFF5-4A7845C80A0E (Friendly Name: ).2330400-92233720368547758083137Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6005088n-h1-712140-11.cbci-712140-11.local8/28/2021 3:08:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403136Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:08:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403135Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:08:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2A038F9D-EEC6-4A8A-A413-74BE0B959B76--42FCADBC-2479-4BBA-A1B1-BE75F450D2B7 (Friendly Name: 35c9bfdd-519f-41da-9705-be16ef4d8eb3).2330400-92233720368547758083134Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49444948n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-704876445-1250619078-3195278244-19899077238/28/2021 3:08:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2A038F9D-EEC6-4A8A-A413-74BE0B959B76--42FCADBC-2479-4BBA-A1B1-BE75F450D2B7 successfully disconnected from port .2340400-92233720368547758083133Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49444948n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-704876445-1250619078-3195278244-19899077238/28/2021 3:08:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5C7F4D5C-B5E6-4E05-8CF3-AE8D79448215--247DF988-39B8-4902-82CB-1059F34BE45B (Friendly Name: 4c869b7d-21e7-442d-b6e2-356780105417).2330400-92233720368547758083132Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40124160n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1551846748-1308997094-2377053068-3608587458/28/2021 3:08:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5C7F4D5C-B5E6-4E05-8CF3-AE8D79448215--247DF988-39B8-4902-82CB-1059F34BE45B successfully disconnected from port .2340400-92233720368547758083131Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40124160n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1551846748-1308997094-2377053068-3608587458/28/2021 3:08:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2A038F9D-EEC6-4A8A-A413-74BE0B959B76--42FCADBC-2479-4BBA-A1B1-BE75F450D2B7 (Friendly Name: 35c9bfdd-519f-41da-9705-be16ef4d8eb3) successfully connected to port 8845658B-33A0-4049-A96F-3E01102C9126 (Friendly Name: 35c9bfdd-519f-41da-9705-be16ef4d8eb3) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083130Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49444936n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-704876445-1250619078-3195278244-19899077238/28/2021 3:08:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2A038F9D-EEC6-4A8A-A413-74BE0B959B76--42FCADBC-2479-4BBA-A1B1-BE75F450D2B7 (Friendly Name: ).2330400-92233720368547758083129Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49444936n-h1-712140-11.cbci-712140-11.local8/28/2021 3:08:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BDA11404-E24B-4819-9BBC-BE485C08AB98--15550018-726E-4F47-AD7A-66A4FB236238 (Friendly Name: cbfc4ee1-df1e-4ce5-a7fc-62669f374b42) successfully connected to port 4317857F-B6A0-4D59-8CBC-66BC82EEC2A2 (Friendly Name: cbfc4ee1-df1e-4ce5-a7fc-62669f374b42) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083128Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46004784n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3181450244-1209655883-1220459675-25613456288/28/2021 3:08:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BDA11404-E24B-4819-9BBC-BE485C08AB98--15550018-726E-4F47-AD7A-66A4FB236238 (Friendly Name: ).2330400-92233720368547758083127Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46004784n-h1-712140-11.cbci-712140-11.local8/28/2021 3:08:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403126Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:07:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403125Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:07:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AB479DE5-77E2-422D-9023-E98700D1CB40--9778A0AD-35B6-4981-910F-491792C9D53D (Friendly Name: d1d85754-721c-4176-92a6-4ae06c906ed6) successfully connected to port 3090DF38-53B7-4766-BDF6-57F45FE2503F (Friendly Name: d1d85754-721c-4176-92a6-4ae06c906ed6) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083124Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36363884n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-2873597413-1110276066-2280203152-10870991368/28/2021 3:07:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AB479DE5-77E2-422D-9023-E98700D1CB40--9778A0AD-35B6-4981-910F-491792C9D53D (Friendly Name: ).2330400-92233720368547758083123Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36363884n-h1-712140-11.cbci-712140-11.local8/28/2021 3:07:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5C7F4D5C-B5E6-4E05-8CF3-AE8D79448215--247DF988-39B8-4902-82CB-1059F34BE45B (Friendly Name: 4c869b7d-21e7-442d-b6e2-356780105417) successfully connected to port D45E10A5-2B97-47D8-BAFE-4FD0F63CC81A (Friendly Name: 4c869b7d-21e7-442d-b6e2-356780105417) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083122Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40122944n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1551846748-1308997094-2377053068-3608587458/28/2021 3:07:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5C7F4D5C-B5E6-4E05-8CF3-AE8D79448215--247DF988-39B8-4902-82CB-1059F34BE45B (Friendly Name: ).2330400-92233720368547758083121Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40122944n-h1-712140-11.cbci-712140-11.local8/28/2021 3:07:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-1F-D8-32 has moved from port 9108CE1A-09DF-4A29-AE97-B2B7C34A4B23 (Friendly Name: 971ccb03-2d03-4d98-adf9-702312bf91b6) to port 9108CE1A-09DF-4A29-AE97-B2B7C34A4B23 (Friendly Name: 971ccb03-2d03-4d98-adf9-702312bf91b6).250410180-92233720368547758083120Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25404132n-h1-712140-11.cbci-712140-11.local8/28/2021 3:07:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 41DEF423-4E32-4B9C-8768-4B79ABDF6643--D082504C-F693-4F81-A182-32C877A26AF0 (Friendly Name: 971ccb03-2d03-4d98-adf9-702312bf91b6) successfully connected to port 9108CE1A-09DF-4A29-AE97-B2B7C34A4B23 (Friendly Name: 971ccb03-2d03-4d98-adf9-702312bf91b6) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083119Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51125080n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1105130531-1268534834-2034985095-11308154038/28/2021 3:07:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 41DEF423-4E32-4B9C-8768-4B79ABDF6643--D082504C-F693-4F81-A182-32C877A26AF0 (Friendly Name: ).2330400-92233720368547758083118Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51125076n-h1-712140-11.cbci-712140-11.local8/28/2021 3:07:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server. This event occurs once per boot of the server on the first time a client uses NTLM with this server. NTLM is a weaker authentication mechanism. Please check: Which applications are using NTLM authentication? Are there configuration issues preventing the use of stronger authentication such as Kerberos authentication? If NTLM must be supported, is Extended Protection configured? Details on how to complete these checks can be found at http://go.microsoft.com/fwlink/?LinkId=225699.603800300360287970189639683117LsaSrv199fe037-2b82-40a9-82ac-e1d46c792b99System00n-h1-712140-11.cbci-712140-11.local8/28/2021 3:07:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403116Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:07:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403115Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:07:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CBB9BF29-04CB-4C0A-9F83-332DC3507D16--1463FDB9-1260-4C1E-9380-5C40BCD56AC8 (Friendly Name: a8db1667-b702-42e0-8ed8-bbb0bbd86919) successfully connected to port C7FDA663-7245-4245-8A17-28BDAB4F2380 (Friendly Name: a8db1667-b702-42e0-8ed8-bbb0bbd86919) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083114Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9403084n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3417947945-1275725003-758350751-3773114278/28/2021 3:07:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CBB9BF29-04CB-4C0A-9F83-332DC3507D16--1463FDB9-1260-4C1E-9380-5C40BCD56AC8 (Friendly Name: ).2330400-92233720368547758083113Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9403084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:07:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403112Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:07:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6B468D5D-E580-471F-B11E-78BAFAF629AF--B9A2A506-138C-4C7E-8056-FDB52DE76023 (Friendly Name: 9f572433-0332-4db9-bc85-949fbdc61b89).2330400-92233720368547758083111Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47204688n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1799785821-1193272704-3128434353-29387630028/28/2021 3:06:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6B468D5D-E580-471F-B11E-78BAFAF629AF--B9A2A506-138C-4C7E-8056-FDB52DE76023 successfully disconnected from port .2340400-92233720368547758083110Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47204688n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1799785821-1193272704-3128434353-29387630028/28/2021 3:06:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6B468D5D-E580-471F-B11E-78BAFAF629AF--B9A2A506-138C-4C7E-8056-FDB52DE76023 (Friendly Name: 9f572433-0332-4db9-bc85-949fbdc61b89) successfully connected to port 65BEE7FE-B4BC-4A85-AA89-936D1F5F092F (Friendly Name: 9f572433-0332-4db9-bc85-949fbdc61b89) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083109Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47204688n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1799785821-1193272704-3128434353-29387630028/28/2021 3:06:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6B468D5D-E580-471F-B11E-78BAFAF629AF--B9A2A506-138C-4C7E-8056-FDB52DE76023 (Friendly Name: ).2330400-92233720368547758083108Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47204688n-h1-712140-11.cbci-712140-11.local8/28/2021 3:06:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Status 0x00001069 determining that device interface \\?\{8e7bd593-6e6c-4c52-86a6-77175494dd8e}#MsVhdHba#1&3030e83&0&01#{2accfe60-c130-11d2-b082-00a0c91efb8b} does not support iSCSI WMI interfaces. If this device is not an iSCSI HBA then this error can be ignored. 108030360287970189639683107MSiSCSISystemn-h1-712140-11.cbci-712140-11.local8/28/2021 3:06:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E44D8891-A596-474A-BBBC-EC522A45B4D9--A94B1CFB-72DF-4A43-B94B-8099BB88F1BD (Friendly Name: d8361302-8401-4b6c-8ae6-43555f006a46) successfully connected to port 9885066A-5BA1-4123-8F8C-1FD81D0603B1 (Friendly Name: d8361302-8401-4b6c-8ae6-43555f006a46) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083106Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33404316n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-3830286481-1196074390-1391246523-36524700588/28/2021 3:06:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E44D8891-A596-474A-BBBC-EC522A45B4D9--A94B1CFB-72DF-4A43-B94B-8099BB88F1BD (Friendly Name: ).2330400-92233720368547758083105Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33404316n-h1-712140-11.cbci-712140-11.local8/28/2021 3:06:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118403104Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:06:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118403103Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:06:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 617988AA-B999-4686-BE82-8E4BFA0D3857--1027873C-8713-4D4A-8F0B-0BECD549A63E (Friendly Name: 1880001e-0bea-4655-b777-0ed6f33422e5).2330400-92233720368547758083102Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40442372n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1635354794-1183234457-1267630782-14632913868/28/2021 3:06:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 617988AA-B999-4686-BE82-8E4BFA0D3857--1027873C-8713-4D4A-8F0B-0BECD549A63E successfully disconnected from port .2340400-92233720368547758083101Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40442372n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1635354794-1183234457-1267630782-14632913868/28/2021 3:06:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 617988AA-B999-4686-BE82-8E4BFA0D3857--1027873C-8713-4D4A-8F0B-0BECD549A63E (Friendly Name: 1880001e-0bea-4655-b777-0ed6f33422e5) successfully connected to port 20D4C38D-654C-47D3-B852-9A3A717EEAA7 (Friendly Name: 1880001e-0bea-4655-b777-0ed6f33422e5) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758083100Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40442396n-h1-712140-11.cbci-712140-11.localS-1-5-83-1-1635354794-1183234457-1267630782-14632913868/28/2021 3:06:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 617988AA-B999-4686-BE82-8E4BFA0D3857--1027873C-8713-4D4A-8F0B-0BECD549A63E (Friendly Name: ).2330400-92233720368547758083099Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40442396n-h1-712140-11.cbci-712140-11.local8/28/2021 3:06:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403098Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:06:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403097Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:06:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403096Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:06:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Biometric Service service entered the stopped state.7036016384400-91873432398358118403095Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042296n-h1-712140-11.cbci-712140-11.local8/28/2021 3:05:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the stopped state.7036016384400-91873432398358118403094Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:05:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403093Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:05:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118403092Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:05:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118403091Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:05:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403090Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:04:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403089Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:04:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Downloaded Maps Manager service entered the stopped state.7036016384400-91873432398358118403088Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:04:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the running state.7036016384400-91873432398358118403087Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h1-712140-11.cbci-712140-11.local8/28/2021 3:04:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403086Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h1-712140-11.cbci-712140-11.local8/28/2021 3:04:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the running state.7036016384400-91873432398358118403085Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:04:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Downloaded Maps Manager service entered the running state.7036016384400-91873432398358118403084Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:04:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the running state.7036016384400-91873432398358118403083Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:04:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the running state.7036016384400-91873432398358118403082Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:04:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118403081Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h1-712140-11.cbci-712140-11.local8/28/2021 3:04:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the stopped state.7036016384400-91873432398358118403080Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h1-712140-11.cbci-712140-11.local8/28/2021 3:03:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The neutron-hyperv-agent service entered the running state.7036016384400-91873432398358118403079Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:03:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user CBCI-712140-11\administrator SID (S-1-5-21-936545031-3315182023-3337675367-500) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403078Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9802148n-h1-712140-11.cbci-712140-11.localS-1-5-21-936545031-3315182023-3337675367-5008/28/2021 3:03:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the neutron-hyperv-agent service was changed from demand start to auto start.7040016384400-91873432398358118403077Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.localS-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 3:03:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nova-compute service entered the running state.7036016384400-91873432398358118403076Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h1-712140-11.cbci-712140-11.local8/28/2021 3:03:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user CBCI-712140-11\administrator SID (S-1-5-21-936545031-3315182023-3337675367-500) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403075Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9802148n-h1-712140-11.cbci-712140-11.localS-1-5-21-936545031-3315182023-3337675367-5008/28/2021 3:03:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403074Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h1-712140-11.cbci-712140-11.local8/28/2021 3:03:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nova-compute service was changed from demand start to auto start.7040016384400-91873432398358118403073Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.localS-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 3:03:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403072Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083071Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14723404n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:58 PM4893d764-ce73-478f-9d76-4749cea0c7afsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source VM IC Time Synchronization Provider.350400-92233720368547758083070Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem10281188n-h1-712140-11.cbci-712140-11.localS-1-5-198/28/2021 3:02:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403069Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083068Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14723404n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:49 PM60d0da13-9df9-4e75-b31d-9ea29de7c906systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the stopped state.7036016384400-91873432398358118403067Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the stopped state.7036016384400-91873432398358118403066Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639683065Virtual Disk ServiceSystemn-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the running state.7036016384400-91873432398358118403064Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639683063Virtual Disk ServiceSystemn-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from n-ad-712140-11.cbci-712140-11.local (ntp.d|0.0.0.0:123->10.222.0.49:123).370400-92233720368547758083062Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem10281832n-h1-712140-11.cbci-712140-11.localS-1-5-198/28/2021 3:02:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118403061Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\cloudbase-init SID (S-1-5-21-2970305437-2276265235-2248793384-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403060Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9802148n-h1-712140-11.cbci-712140-11.localS-1-5-21-2970305437-2276265235-2248793384-10008/28/2021 3:02:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system failed to register pointer (PTR) resource records (RRs) for network adapter with settings: Adapter Name : {2DC85B7C-C410-44A8-AFB3-D32223569B4C} Host Name : n-h1-712140-11 Adapter-specific Domain Suffix : cbci-712140-11.local DNS server list : 10.222.0.49, 8.8.8.8, 4.4.4.4 Sent update to server : <?> IP Address : 10.222.0.15 The reason the system could not register these RRs during the update request was because of a system problem. You can manually retry DNS registration of the network adapter and its settings by typing 'ipconfig /registerdns' at the command prompt. If problems still persist, contact your DNS server or network systems administrator. See event details for specific error code information.8014041028046116860184273879043059Microsoft-Windows-DNS-Client1c95126e-7eea-49a9-a3fe-a378b03ddb4dSystem11401960n-h1-712140-11.cbci-712140-11.localS-1-5-208/28/2021 3:02:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403058Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804880n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083057Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14723404n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:31 PM68c299bd-2e4a-4a45-8d18-b6f03b58ccf3systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wuauserv service entered the running state.7036016384400-91873432398358118403056Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042296n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The swprv service entered the running state.7036016384400-91873432398358118403055Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042296n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403054Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042296n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmcompute service entered the running state.7036016384400-91873432398358118403053Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042296n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The firewall exception to allow Internet Storage Name Server (iSNS) client functionality is not enabled. iSNS client functionality is not available.121030360287970189639683052MSiSCSISystemn-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083051Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14722984n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:29 PMdc85193a-187d-419f-97d1-4a1a14d42516systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403050Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801012n-h1-712140-11.cbci-712140-11.localS-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 3:02:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wlidsvc service entered the running state.7036016384400-91873432398358118403049Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MSiSCSI service entered the running state.7036016384400-91873432398358118403048Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042296n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the running state.7036016384400-91873432398358118403047Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042296n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118403046Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804808n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\cloudbase-init SID (S-1-5-21-2970305437-2276265235-2248793384-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403045Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9801020n-h1-712140-11.cbci-712140-11.localS-1-5-21-2970305437-2276265235-2248793384-10008/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981443044Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4136n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118403043Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:10.222.0.15 has been brought up.42000400-92233720368547758083042Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System14722072n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981443041Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem41304n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The KeyIso service entered the running state.7036016384400-91873432398358118403040Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118403039Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118403038Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042296n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118403037Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042296n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118403036Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042296n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118403035Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118403034Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118403033Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118403032Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118403031Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118403030Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118403029Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118403028Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118403027Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118403026Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042368n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118403025Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118403024Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118403023Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804584n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118403022Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118403021Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042360n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SessionEnv service entered the running state.7036016384400-91873432398358118403020Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042296n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Netlogon service entered the running state.7036016384400-91873432398358118403019Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118403018Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403017Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A new self signed certificate to be used for RD Session Host Server authentication on SSL connections was generated. The name on this certificate is n-h1-712140-11.cbci-712140-11.local. The SHA1 hash of the certificate is in the event data.1056049152400360287970189639683016Microsoft-Windows-TerminalServices-RemoteConnectionManagerc76baa63-ae81-421c-b425-340b4b24157fSystem00n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639683015Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the running state.7036016384400-91873432398358118403014Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118403013Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118403012Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKEEXT service entered the running state.7036016384400-91873432398358118403011Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804604n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118403010Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804604n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118403009Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804604n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CertPropSvc service entered the running state.7036016384400-91873432398358118403008Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804604n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118403007Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804604n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118403006Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804604n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118403005Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804604n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UmRdpService service entered the running state.7036016384400-91873432398358118403004Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118403003Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041088n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is now operational.230410160-92233720368547758083002Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem432n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758083001Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem432n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758083000Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem432n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PolicyAgent service entered the running state.7036016384400-91873432398358118402999Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804608n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118402998Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804608n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402997Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402996Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402995Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcbService service entered the running state.7036016384400-91873432398358118402994Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041108n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the running state.7036016384400-91873432398358118402993Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402992Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402991Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041108n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402990Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041108n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402989Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804608n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402988Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804608n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402987Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041108n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402986Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041108n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402985Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041108n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402984Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804608n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402983Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804608n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442982Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4388n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402981Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442980Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4388n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402979Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804612n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?08?-?28T15:02:25.522000000Z from ?2021?-?08?-?28T15:02:25.841790800Z. Change Reason: An application or system component changed the time.11450-92233720368547757922978Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem3681316n-h1-712140-11.cbci-712140-11.localS-1-5-198/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402977Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804608n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402976Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804608n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402975Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804608n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522974Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System3681276n-h1-712140-11.cbci-712140-11.localS-1-5-198/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402973Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041104n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442972Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4388n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TermService service entered the running state.7036016384400-91873432398358118402971Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041108n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522970Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem3681136n-h1-712140-11.cbci-712140-11.localS-1-5-198/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402969Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402968Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402967Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402966Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402965Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402964Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402963Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402962Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402961Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402960Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402959Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082958Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem820824n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:24 PMb17d97ce-9c1d-0005-d197-7db11d9cd701systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042957Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem692696n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082956Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is now operational.230410160-92233720368547758082955Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4508n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082954Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4508n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is no longer operational.240410170-92233720368547758082953Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4508n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Protocol NIC /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully bound to port 7AAC756B-3343-4A88-B626-8725FDDBAFA8 (Friendly Name: br-data_External) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).170410120-92233720368547758082952Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4508n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully connected to port 7AAC756B-3343-4A88-B626-8725FDDBAFA8 (Friendly Name: br-data_External) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758082951Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4508n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully updated NIC NDIS QoS with Miniport NIC /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: Microsoft Hyper-V Network Adapter #2)1910400-92233720368547758082950Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4508n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: ).2330400-92233720368547758082949Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4508n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082948Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082947Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082946Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4388n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082945Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082944Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4312n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082943Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4312n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082942Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4312n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082941Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4312n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082940Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4312n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082939Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4312n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082938Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082937Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4388n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
If Digest support selected for iSCSI Session, Will use Processor support for Digest computation.671638440360287970189639682936iScsiPrtSystemn-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Switch CD22D7FE-0BE9-426E-B77D-046638AB1562 (Friendly Name: br-data) successfully initialized.90410050-92233720368547758082935Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4312n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CD22D7FE-0BE9-426E-B77D-046638AB1562 (Friendly Name: br-data) successfully connected to port CD22D7FE-0BE9-426E-B77D-046638AB1562 (Friendly Name: br-data) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758082934Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4312n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CD22D7FE-0BE9-426E-B77D-046638AB1562 (Friendly Name: br-data).2330400-92233720368547758082933Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4312n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802932Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802931Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4208n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442930Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682929VfpExtSystemn-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442928Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume C: (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062927Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4208n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442926Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442925Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442924Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442923Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442922Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442921Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082920Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082919Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082918Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082917Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082916Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082915Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2021?-?08?-?28T15:02:17.496971100Z.120410-92233720368547756802914Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48n-h1-712140-11.cbci-712140-11.localS-1-5-188/28/2021 3:02:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2021?-?08?-?28T15:02:10.268501200Z.130420-92233720368547756802913Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem44728n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162912Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System688692n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Initiator Service service entered the stopped state.7036016384400-91873432398358118402911Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).370400-92233720368547758082910Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14324040n-h1-712140-11.cbci-712140-11.localS-1-5-198/28/2021 3:02:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service entered the stopped state.7036016384400-91873432398358118402909Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system uptime is 8 seconds.60133276840360287970189639682908EventLogSystemn-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682907EventLogSystemn-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682906EventLogSystemn-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services service entered the stopped state.7036016384400-91873432398358118402905Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402904Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402903Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402902Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-11.cbci-712140-11.local8/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402901Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKE and AuthIP IPsec Keying Modules service entered the stopped state.7036016384400-91873432398358118402900Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402899Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the stopped state.7036016384400-91873432398358118402898Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402897Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402896Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Software Shadow Copy Provider service entered the stopped state.7036016384400-91873432398358118402895Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402894Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004292n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the stopped state.7036016384400-91873432398358118402893Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004292n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402892Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004292n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service entered the stopped state.7036016384400-91873432398358118402891Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402890Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IPsec Policy Agent service entered the stopped state.7036016384400-91873432398358118402889Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402888Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004292n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services UserMode Port Redirector service entered the stopped state.7036016384400-91873432398358118402887Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8002472n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the stopped state.7036016384400-91873432398358118402886Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8003336n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402885Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8003336n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402884Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8003336n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522883Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem14241524n-h1-712140-11S-1-5-198/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522882Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System14241572n-h1-712140-11S-1-5-198/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Install Service service entered the stopped state.7036016384400-91873432398358118402881Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004400n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402880Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004400n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402879Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8002340n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402878Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001156n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?08?-?28T15:02:08.735000000Z from ?2021?-?08?-?28T15:02:08.736874200Z. Change Reason: An application or system component changed the time.11450-92233720368547757922877Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14321528n-h1-712140-11S-1-5-198/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HV Host Service service entered the stopped state.7036016384400-91873432398358118402876Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004720n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402875Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004388n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682874EventLogSystemn-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is not listening for WS-Management requests. User Action If you did not intentionally stop the service, use the following command to see the WinRM configuration: winrm enumerate winrm/config/listener1014907300360287970189639682873Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the stopped state.7036016384400-91873432398358118402872Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004388n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402871Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004388n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402870Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004388n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402869Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004388n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402868Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004388n-h1-712140-118/28/2021 3:02:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\system32\shutdown.exe (N-H1-712140-11) has initiated the restart of computer N-H1-712140-11 on behalf of user N-H1-712140-11\Admin for the following reason: No title for this reason could be found Reason Code: 0x800000ff Shutdown Type: restart Comment: Reboot initiated by Ansible1074032768400-91873432398358118402867User32b0aa8734-56f7-41cc-b2f4-de228e98b946System588604n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 3:02:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402866Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9562456n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 3:02:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Netlogon service entered the running state.7036016384400-91873432398358118402865Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004388n-h1-712140-118/28/2021 3:02:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Connectivity Assistant service entered the stopped state.7036016384400-91873432398358118402864Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004388n-h1-712140-118/28/2021 3:02:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The machine n-h1-712140-11 successfully joined the domain cbci-712140-11.local.40960400-92233720368547758082863NetJoin9741fd4e-3757-479f-a3c6-fc49f6d5edd0System13321364n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 3:02:04 PM00000000-0000-0000-0100-000000000000systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
This computer has been successfully joined to domain 'cbci-712140-11.local'.3260040360287970189639682862WorkstationSystemn-h1-712140-118/28/2021 3:02:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402861Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9562456n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 3:02:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402860Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 3:01:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402859Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 3:01:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402858Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 3:01:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402857Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004388n-h1-712140-118/28/2021 3:01:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic System Host service entered the stopped state.7036016384400-91873432398358118402856Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004400n-h1-712140-118/28/2021 2:53:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402855Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004400n-h1-712140-118/28/2021 2:45:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402854Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004400n-h1-712140-118/28/2021 2:41:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402853Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004400n-h1-712140-118/28/2021 2:41:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402852Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004400n-h1-712140-118/28/2021 2:37:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402851Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004136n-h1-712140-118/28/2021 2:36:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402850Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004136n-h1-712140-118/28/2021 2:36:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The firewall exception to allow Internet Storage Name Server (iSNS) client functionality is not enabled. iSNS client functionality is not available.121030360287970189639682849MSiSCSISystemn-h1-712140-118/28/2021 2:35:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Initiator Service service entered the running state.7036016384400-91873432398358118402848Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004136n-h1-712140-118/28/2021 2:35:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118402847Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004136n-h1-712140-118/28/2021 2:35:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the running state.7036016384400-91873432398358118402846Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004136n-h1-712140-118/28/2021 2:35:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
If Digest support selected for iSCSI Session, Will use Processor support for Digest computation.671638440360287970189639682845iScsiPrtSystemn-h1-712140-118/28/2021 2:35:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118402844Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004856n-h1-712140-118/28/2021 2:35:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft iSCSI Initiator Service service was changed from demand start to auto start.7040016384400-91873432398358118402843Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004856n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:35:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402842Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:35:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402841Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:35:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402840Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:34:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402839Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:34:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402838Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:34:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402837Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:34:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402836Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:34:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402835Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:34:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402834Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:34:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402833Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:34:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402832Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:33:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402831Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:33:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402830Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:33:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402829Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:33:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402828Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001892n-h1-712140-118/28/2021 2:33:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402827Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001892n-h1-712140-118/28/2021 2:31:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402826Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:30:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402825Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:30:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402824Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:29:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402823Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:29:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402822Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:29:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402821Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:29:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402820Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:29:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402819Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:29:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402818Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:28:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402817Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:28:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402816Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:28:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402815Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:26:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402814Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:25:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Installer service entered the stopped state.7036016384400-91873432398358118402813Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:25:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402812Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:23:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402811Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:22:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118402810Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:22:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402809Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:22:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402808Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:22:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402807Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:22:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402806Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:22:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118402805Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:21:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118402804Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:21:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Registry service entered the stopped state.7036016384400-91873432398358118402803Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:21:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The App Readiness service entered the stopped state.7036016384400-91873432398358118402802Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:21:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402801Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:21:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the running state.7036016384400-91873432398358118402800Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:20:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402799Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:20:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402798Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:20:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402797Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:20:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402796Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:20:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402795Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:20:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402794Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:20:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402793Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:20:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402792Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:20:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402791Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:20:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402790Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001892n-h1-712140-118/28/2021 2:20:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402789Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:20:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402788Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:20:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Installer service entered the running state.7036016384400-91873432398358118402787Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001892n-h1-712140-118/28/2021 2:20:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402786Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:19:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402785Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:19:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402784Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:19:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402783Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:19:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402782Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:19:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402781Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:19:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118402780Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:19:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402779Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:18:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402778Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:18:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402777Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:18:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402776Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:18:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402775Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:18:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402774Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:18:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402773Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800872n-h1-712140-118/28/2021 2:18:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the stopped state.7036016384400-91873432398358118402772Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800872n-h1-712140-118/28/2021 2:18:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402771Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800872n-h1-712140-118/28/2021 2:17:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402770Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:17:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402769Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:17:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402768Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:17:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402767Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:17:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402766Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:17:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402765Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:17:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402764Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:17:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402763Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:16:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402762Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561768n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:16:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).370400-92233720368547758082761Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14321556n-h1-712140-11S-1-5-198/28/2021 2:16:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402760Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem956364n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:16:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402759Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561960n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:16:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).370400-92233720368547758082758Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14321556n-h1-712140-11S-1-5-198/28/2021 2:16:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402757Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561960n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:16:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).370400-92233720368547758082756Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14321808n-h1-712140-11S-1-5-198/28/2021 2:16:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).370400-92233720368547758082755Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14321692n-h1-712140-11S-1-5-198/28/2021 2:16:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully connected to port 7AAC756B-3343-4A88-B626-8725FDDBAFA8 (Friendly Name: br-data_External) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758082754Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25042784n-h1-712140-11S-1-5-188/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is now operational.230410160-92233720368547758082753Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5922768n-h1-712140-118/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082752Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem5922768n-h1-712140-11S-1-5-188/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is no longer operational.240410170-92233720368547758082751Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5922768n-h1-712140-118/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is no longer operational.240410170-92233720368547758082750Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5922768n-h1-712140-118/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Protocol NIC /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully bound to port (Friendly Name: ) on switch (Friendly Name: ).170410120-92233720368547758082749Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5922768n-h1-712140-11S-1-5-188/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully updated NIC NDIS QoS with Miniport NIC /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: Microsoft Hyper-V Network Adapter #2)1910400-92233720368547758082748Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5922768n-h1-712140-118/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic /DEVICE/{7F712CE2-8F66-460F-A444-CAF16CCFA9E1} (Friendly Name: ).2330400-92233720368547758082747Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5922768n-h1-712140-118/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082746Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem5922768n-h1-712140-11S-1-5-188/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082745Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem42888n-h1-712140-11S-1-5-188/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082744Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem41268n-h1-712140-11S-1-5-188/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082743Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem13321844n-h1-712140-118/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082742Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem41268n-h1-712140-11S-1-5-188/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' is halting60410030-92233720368547758082741Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-712140-11S-1-5-188/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal is no longer active.42010400-92233720368547758082740Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System5922472n-h1-712140-11S-1-5-188/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082739Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-712140-11S-1-5-188/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118402738Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001892n-h1-712140-118/28/2021 2:16:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Switch CD22D7FE-0BE9-426E-B77D-046638AB1562 (Friendly Name: br-data) successfully initialized.90410050-92233720368547758082737Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25042188n-h1-712140-11S-1-5-188/28/2021 2:16:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CD22D7FE-0BE9-426E-B77D-046638AB1562 (Friendly Name: br-data) successfully connected to port CD22D7FE-0BE9-426E-B77D-046638AB1562 (Friendly Name: br-data) on switch CD22D7FE-0BE9-426E-B77D-046638AB1562(Friendly Name: br-data).2320400-92233720368547758082736Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25042188n-h1-712140-11S-1-5-188/28/2021 2:16:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CD22D7FE-0BE9-426E-B77D-046638AB1562 (Friendly Name: br-data).2330400-92233720368547758082735Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25042188n-h1-712140-118/28/2021 2:16:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver wvms_mp.inf_amd64_e1065995a017ab1b\wvms_mp.inf for Device Instance ID ROOT\VMS_VSMP\0000 with the following status: 0x0.200010470050-92233720368547758082734Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System9282392n-h1-712140-11S-1-5-188/28/2021 2:16:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: VMSMP Service File Name: \SystemRoot\System32\drivers\vmswitch.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: 7045016384400-91873432398358118402733Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800872n-h1-712140-11S-1-5-188/28/2021 2:16:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402732Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800872n-h1-712140-118/28/2021 2:16:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118402731Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800872n-h1-712140-118/28/2021 2:16:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118402730Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800872n-h1-712140-118/28/2021 2:16:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402729Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561004n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:16:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the neutron-hyperv-agent service was changed from auto start to demand start.7040016384400-91873432398358118402728Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800872n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:16:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: neutron-hyperv-agent Service File Name: c:\openstack\bin\OpenStackService.exe neutron-hyperv-agent c:\python37\scripts\neutron-hyperv-agent.exe --config-file c:\openstack\etc\neutron-hyperv-agent.conf Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem7045016384400-91873432398358118402727Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:16:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nova-compute service was changed from auto start to demand start.7040016384400-91873432398358118402726Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001888n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:16:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: nova-compute Service File Name: c:\openstack\bin\OpenStackService.exe nova-compute c:\python37\scripts\nova-compute.exe --config-file c:\openstack\etc\nova.conf Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem7045016384400-91873432398358118402725Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:16:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402724Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:16:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402723Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561004n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:16:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKE and AuthIP IPsec Keying Modules service entered the running state.7036016384400-91873432398358118402722Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001888n-h1-712140-118/28/2021 2:16:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the IKE and AuthIP IPsec Keying Modules service was changed from demand start to auto start.7040016384400-91873432398358118402721Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001888n-h1-712140-11S-1-5-188/28/2021 2:16:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402720Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561004n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:16:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402719Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561004n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:15:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402718Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561004n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:15:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402717Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561004n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:15:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the stopped state.7036016384400-91873432398358118402716Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:15:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402715Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:15:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402714Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561004n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:15:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402713Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:15:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wisvc service entered the stopped state.7036016384400-91873432398358118402712Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:15:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushservice service entered the stopped state.7036016384400-91873432398358118402711Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:15:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402710Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561864n-h1-712140-11S-1-5-208/28/2021 2:15:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402709Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:15:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402708Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561864n-h1-712140-11S-1-5-208/28/2021 2:14:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the stopped state.7036016384400-91873432398358118402707Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:14:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wisvc service entered the running state.7036016384400-91873432398358118402706Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:14:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UsoSvc service entered the running state.7036016384400-91873432398358118402705Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:14:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118402704Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:14:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402703Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:13:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MapsBroker service entered the stopped state.7036016384400-91873432398358118402702Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:13:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118402701Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:13:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UALSVC service entered the running state.7036016384400-91873432398358118402700Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:13:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the running state.7036016384400-91873432398358118402699Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:13:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MapsBroker service entered the running state.7036016384400-91873432398358118402698Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:13:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WdiSystemHost service entered the running state.7036016384400-91873432398358118402697Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:13:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DPS service entered the running state.7036016384400-91873432398358118402696Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:13:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the running state.7036016384400-91873432398358118402695Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:13:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402694Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561864n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:12:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402693Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:12:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?08?-?28T14:12:29.063000000Z from ?2021?-?08?-?28T14:12:29.067826800Z. Change Reason: An application or system component changed the time.11450-92233720368547757922692Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14321528n-h1-712140-11S-1-5-198/28/2021 2:12:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the stopped state.7036016384400-91873432398358118402691Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:12:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PolicyAgent service entered the running state.7036016384400-91873432398358118402690Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:12:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SSL Certificate Settings created by an admin process for endpoint : 0.0.0.0:5986 .15301032768300360287970189639682689Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System43848n-h1-712140-118/28/2021 2:12:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Reservation for namespace identified by URL prefix https://+:5986/wsman/ was successfully added.15007016384400360287970189639682688Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System43848n-h1-712140-118/28/2021 2:12:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Reservation for namespace identified by URL prefix https://+:5986/wsman/ was successfully deleted.15008016384400360287970189639682687Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System43848n-h1-712140-118/28/2021 2:12:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the stopped state.7036016384400-91873432398358118402686Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:12:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639682685Virtual Disk ServiceSystemn-h1-712140-118/28/2021 2:12:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the running state.7036016384400-91873432398358118402684Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:12:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639682683Virtual Disk ServiceSystemn-h1-712140-118/28/2021 2:12:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\Admin SID (S-1-5-21-2970305437-2276265235-2248793384-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402682Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561000n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10018/28/2021 2:12:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TBS device identifier has been generated.12820400-92233720368547758082681Microsoft-Windows-TPM-WMI7d5387b0-cbe0-11da-a94d-0800200c9a66System21643896n-h1-712140-11S-1-5-188/28/2021 2:11:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).350400-92233720368547758082680Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14321552n-h1-712140-11S-1-5-198/28/2021 2:11:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\cloudbase-init SID (S-1-5-21-2970305437-2276265235-2248793384-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402679Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561864n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10008/28/2021 2:11:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrustedInstaller service entered the running state.7036016384400-91873432398358118402678Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118402677Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 1 Group Policy objects were detected and applied.15020401-92233720368547758082676Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System5923816n-h1-712140-11S-1-5-188/28/2021 2:11:39 PMea50da98-c862-4090-a672-83dced9e50e5systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The swprv service entered the running state.7036016384400-91873432398358118402675Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:192.168.0.11 has been brought up.42000400-92233720368547758082674Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System5922732n-h1-712140-11S-1-5-188/28/2021 2:11:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:10.222.0.15 has been brought up.42000400-92233720368547758082673Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System5922732n-h1-712140-11S-1-5-188/28/2021 2:11:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the stopped state.7036016384400-91873432398358118402672Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the running state.7036016384400-91873432398358118402671Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-712140-11\cloudbase-init SID (S-1-5-21-2970305437-2276265235-2248793384-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402670Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9561004n-h1-712140-11S-1-5-21-2970305437-2276265235-2248793384-10008/28/2021 2:11:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wuauserv service entered the running state.7036016384400-91873432398358118402669Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:11:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LicenseManager service entered the running state.7036016384400-91873432398358118402668Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:11:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
This event triggers the TBS device identifier generation.12810400-92233720368547758082667Microsoft-Windows-TPM-WMI7d5387b0-cbe0-11da-a94d-0800200c9a66System5923040n-h1-712140-11S-1-5-188/28/2021 2:11:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SessionEnv service entered the running state.7036016384400-91873432398358118402666Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A new self signed certificate to be used for RD Session Host Server authentication on SSL connections was generated. The name on this certificate is n-h1-712140-11. The SHA1 hash of the certificate is in the event data.1056049152400360287970189639682665Microsoft-Windows-TerminalServices-RemoteConnectionManagerc76baa63-ae81-421c-b425-340b4b24157fSystem00n-h1-712140-118/28/2021 2:11:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the running state.7036016384400-91873432398358118402664Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UmRdpService service entered the running state.7036016384400-91873432398358118402663Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:11:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TermService service entered the running state.7036016384400-91873432398358118402662Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the cloudbase-init service was changed from demand start to auto start.7040016384400-91873432398358118402661Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-11S-1-5-188/28/2021 2:11:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DmEnrollmentSvc service entered the stopped state.7036016384400-91873432398358118402660Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DmEnrollmentSvc service entered the running state.7036016384400-91873432398358118402659Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The KeyIso service entered the running state.7036016384400-91873432398358118402658Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ClipSVC service entered the running state.7036016384400-91873432398358118402657Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:11:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wlidsvc service entered the running state.7036016384400-91873432398358118402656Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:11:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmcompute service entered the running state.7036016384400-91873432398358118402655Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:11:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442654Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4384n-h1-712140-11S-1-5-188/28/2021 2:11:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981442653Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4512n-h1-712140-11S-1-5-188/28/2021 2:11:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118402652Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118402651Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118402650Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001652n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118402649Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800804n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the running state.7036016384400-91873432398358118402648Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118402647Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118402646Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118402645Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001636n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118402644Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001888n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118402643Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118402642Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118402641Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001624n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118402640Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639682639Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118402638Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118402637Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).370400-92233720368547758082636Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14321692n-h1-712140-11S-1-5-198/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402635Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118402634Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001888n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118402633Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118402632Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118402631Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118402630Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001888n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118402629Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001568n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118402628Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001568n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118402627Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001892n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118402626Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001648n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118402625Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402624Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402623Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402622Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402621Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402620Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402619Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402618Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001568n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118402617Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001568n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402616Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001568n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442615Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4508n-h1-712140-11S-1-5-188/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402614Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001684n-h1-712140-118/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442613Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4384n-h1-712140-11S-1-5-188/28/2021 2:11:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442612Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4384n-h1-712140-11S-1-5-188/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcbService service entered the running state.7036016384400-91873432398358118402611Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800884n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402610Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?08?-?28T14:11:27.700000000Z from ?2021?-?08?-?28T14:11:27.376998700Z. Change Reason: An application or system component changed the time.11450-92233720368547757922609Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14241952n-h1-712140-11S-1-5-198/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402608Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402607Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402606Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppReadiness service entered the running state.7036016384400-91873432398358118402605Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001924n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402604Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the running state.7036016384400-91873432398358118402603Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DsmSvc service entered the running state.7036016384400-91873432398358118402602Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402601Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118402600Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001620n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402599Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001684n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402598Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001648n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402597Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001568n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522596Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System14241572n-h1-712140-11S-1-5-198/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402595Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001568n-h1-712140-118/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522594Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem14241524n-h1-712140-11S-1-5-198/28/2021 2:11:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118402593Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001468n-h1-712140-118/28/2021 2:11:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402592Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402591Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118402590Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully logged OS information2004044000023059837467020492802589Microsoft-Windows-Setup75ebc33e-997f-49cf-b49f-ecc50184b75dSystem11761180n-h1-712140-11S-1-5-188/28/2021 2:11:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoOS informationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118402588Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppXSvc service entered the running state.7036016384400-91873432398358118402587Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118402586Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushservice service entered the running state.7036016384400-91873432398358118402585Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402584Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118402583Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DeviceInstall service entered the running state.7036016384400-91873432398358118402582Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402581Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402580Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-712140-118/28/2021 2:11:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402579Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402578Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402577Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402576Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402575Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402574Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-712140-118/28/2021 2:11:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082573Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem816820n-h1-712140-11S-1-5-188/28/2021 2:11:13 PM8b9f21d1-9c16-0002-d221-9f8b169cd701systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042572Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem688692n-h1-712140-11S-1-5-188/28/2021 2:11:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082571Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4228n-h1-712140-11S-1-5-188/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082570Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384n-h1-712140-11S-1-5-188/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082569Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384n-h1-712140-11S-1-5-188/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082568Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4228n-h1-712140-11S-1-5-188/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082567Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188n-h1-712140-118/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082566Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h1-712140-118/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082565Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188n-h1-712140-11S-1-5-188/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082564Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188n-h1-712140-11S-1-5-188/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082563Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188n-h1-712140-11S-1-5-188/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082562Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188n-h1-712140-11S-1-5-188/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082561Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188n-h1-712140-11S-1-5-188/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082560Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188n-h1-712140-11S-1-5-188/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082559Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4228n-h1-712140-11S-1-5-188/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082558Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384n-h1-712140-11S-1-5-188/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802557Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48n-h1-712140-118/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802556Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4228n-h1-712140-11S-1-5-188/28/2021 2:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442555Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-712140-11S-1-5-188/28/2021 2:11:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682554VfpExtSystemn-h1-712140-118/28/2021 2:11:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442553Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-712140-11S-1-5-188/28/2021 2:11:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume C: (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062552Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4228n-h1-712140-11S-1-5-188/28/2021 2:11:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442551Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-712140-11S-1-5-188/28/2021 2:11:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442550Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-712140-11S-1-5-188/28/2021 2:11:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442549Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48n-h1-712140-11S-1-5-188/28/2021 2:11:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442548Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-712140-11S-1-5-188/28/2021 2:11:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442547Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-712140-11S-1-5-188/28/2021 2:11:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442546Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-712140-11S-1-5-188/28/2021 2:11:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082545Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-712140-11S-1-5-188/28/2021 2:11:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082544Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-712140-11S-1-5-188/28/2021 2:11:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082543Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-712140-11S-1-5-188/28/2021 2:11:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082542Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-712140-11S-1-5-188/28/2021 2:11:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082541Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-712140-11S-1-5-188/28/2021 2:11:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082540Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-712140-11S-1-5-188/28/2021 2:11:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2021?-?08?-?28T14:11:07.491765000Z.120410-92233720368547756802539Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48n-h1-712140-11S-1-5-188/28/2021 2:11:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2021?-?08?-?28T14:11:00.806537500Z.130420-92233720368547756802538Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem41828n-h1-712140-118/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162537Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System688692n-h1-712140-118/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service entered the stopped state.7036016384400-91873432398358118402536Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001416n-h1-712140-118/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402535Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001416n-h1-712140-118/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402534Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001416n-h1-712140-118/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402533Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001416n-h1-712140-118/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402532Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001416n-h1-712140-118/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system uptime is 19 seconds.60133276840360287970189639682531EventLogSystemn-h1-712140-118/28/2021 2:11:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682530EventLogSystemn-h1-712140-118/28/2021 2:11:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682529EventLogSystemn-h1-712140-118/28/2021 2:11:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetBIOS name and DNS host name of this machine have been changed from WIN-C6EHRR59UPD to N-H1-712140-11.60113276840360287970189639682528EventLogSystemn-h1-712140-118/28/2021 2:11:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402527Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001416WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402526Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001380WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402525Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001380WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402524Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001380WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402523Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001380WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402522Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001380WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402521Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001380WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402520Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001380WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522519Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem13001568WIN-5T344G8GM1HS-1-5-198/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522518Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System13001688WIN-5T344G8GM1HS-1-5-198/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402517Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001380WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402516Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001416WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402515Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001416WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402514Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001264WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?08?-?28T14:11:00.138000000Z from ?2021?-?08?-?28T14:11:00.140075500Z. Change Reason: An application or system component changed the time.11450-92233720368547757922513Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14882292WIN-5T344G8GM1HS-1-5-198/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402512Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001404WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Install Service service entered the stopped state.7036016384400-91873432398358118402511Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800900WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402510Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8002132WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HV Host Service service entered the stopped state.7036016384400-91873432398358118402509Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800904WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402508Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001284WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402507Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001412WIN-5T344G8GM1H8/28/2021 2:10:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682506EventLogSystemWIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is not listening for WS-Management requests. User Action If you did not intentionally stop the service, use the following command to see the WinRM configuration: winrm enumerate winrm/config/listener1014907300360287970189639682505Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00WIN-5T344G8GM1H8/28/2021 2:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402504Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001412WIN-5T344G8GM1H8/28/2021 2:10:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402503Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001412WIN-5T344G8GM1H8/28/2021 2:10:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402502Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402501Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001412WIN-5T344G8GM1H8/28/2021 2:10:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\system32\winlogon.exe (WIN-5T344G8GM1H) has initiated the restart of computer WIN-C6EHRR59UPD on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Upgrade (Planned) Reason Code: 0x80020003 Shutdown Type: restart Comment: 1074032768400-91873432398358118402500User32b0aa8734-56f7-41cc-b2f4-de228e98b946System600616WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtual Disk service entered the stopped state.7036016384400-91873432398358118402499Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001412WIN-5T344G8GM1H8/28/2021 2:10:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639682498Virtual Disk ServiceSystemWIN-5T344G8GM1H8/28/2021 2:10:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtual Disk service entered the running state.7036016384400-91873432398358118402497Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001412WIN-5T344G8GM1H8/28/2021 2:10:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639682496Virtual Disk ServiceSystemWIN-5T344G8GM1H8/28/2021 2:10:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Network Inspection Service service entered the stopped state.7036016384400-91873432398358118402495Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001412WIN-5T344G8GM1H8/28/2021 2:10:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Network Inspection Service service entered the running state.7036016384400-91873432398358118402494Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001412WIN-5T344G8GM1H8/28/2021 2:10:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402493Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001412WIN-5T344G8GM1H8/28/2021 2:10:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \??\C:\windows\System32\SMI\Store\Machine\SCHEMA.DAT was reorganized with a starting size of 12853248 bytes and an ending size of 11681792 bytes.150400-92233720368547758082492Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11841188WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \??\C:\windows\System32\config\COMPONENTS was reorganized with a starting size of 71872512 bytes and an ending size of 56864768 bytes.150400-92233720368547758082491Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11841188WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).350400-92233720368547758082490Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14881516WIN-5T344G8GM1HS-1-5-198/28/2021 2:10:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082489Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.MiracastView_6.3.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082488Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082487Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameCallableUI_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082486Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.14393.1715_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082485Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082484Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082483Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.14393.1066_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082482Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.AssignedAccessLockApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082481Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082480Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.LockApp_10.0.14393.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082479Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BioEnrollment_10.0.14393.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082478Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AccountsControl_10.0.14393.1715_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082477Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562968WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082476Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10562940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\AppCompat\Programs\Amcache.hve was cleared updating 629 keys and creating 196 modified pages.160400-92233720368547758082475Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem22362480WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver wvmbusvideo.inf_amd64_1f06cc897822eef5\wvmbusvideo.inf for Device Instance ID VMBUS\{DA0A7802-E377-4AAC-8E77-0558EB1073F8}\{5620E0C7-8062-4DCE-AEB7-520C7EF76171} with the following status: 0x0.200010470050-92233720368547758082474Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25882648WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service HyperVideo for Device Instance ID VMBUS\{DA0A7802-E377-4AAC-8E77-0558EB1073F8}\{5620E0C7-8062-4DCE-AEB7-520C7EF76171} with the following status: 0.200030470050-92233720368547758082473Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25882648WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver msports.inf_amd64_280f71b0b084cc3b\msports.inf for Device Instance ID ACPI\PNP0501\1 with the following status: 0x0.200010470050-92233720368547758082472Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25962652WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serenum for Device Instance ID ACPI\PNP0501\1 with the following status: 0.200030470050-92233720368547758082471Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25962652WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serial for Device Instance ID ACPI\PNP0501\1 with the following status: 0.200030470050-92233720368547758082470Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25962652WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver msports.inf_amd64_280f71b0b084cc3b\msports.inf for Device Instance ID ACPI\PNP0501\2 with the following status: 0x0.200010470050-92233720368547758082469Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System26042656WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Host Compute Service service entered the running state.7036016384400-91873432398358118402468Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001412WIN-5T344G8GM1H8/28/2021 2:10:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serenum for Device Instance ID ACPI\PNP0501\2 with the following status: 0.200030470050-92233720368547758082467Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System26042656WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the running state.7036016384400-91873432398358118402466Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serial for Device Instance ID ACPI\PNP0501\2 with the following status: 0.200030470050-92233720368547758082465Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System26042656WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).370400-92233720368547758082464Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14881520WIN-5T344G8GM1HS-1-5-198/28/2021 2:10:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442463Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4580WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981442462Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4472WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118402461Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118402460Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118402459Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800804WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118402458Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the stopped state.7036016384400-91873432398358118402457Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service terminated with the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.7023049152200-91873432398358118402456Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the stopped state.7036016384400-91873432398358118402455Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118402454Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118402453Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118402452Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118402451Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118402450Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118402449Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118402448Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118402447Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118402446Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001288WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118402445Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8002100WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118402444Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800904WIN-5T344G8GM1H8/28/2021 2:10:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118402443Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896WIN-5T344G8GM1H8/28/2021 2:10:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118402442Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800904WIN-5T344G8GM1H8/28/2021 2:10:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118402441Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001384WIN-5T344G8GM1H8/28/2021 2:10:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639682440Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00WIN-5T344G8GM1H8/28/2021 2:10:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402439Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001408WIN-5T344G8GM1H8/28/2021 2:10:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402438Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001408WIN-5T344G8GM1H8/28/2021 2:10:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118402437Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001404WIN-5T344G8GM1H8/28/2021 2:10:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118402436Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001384WIN-5T344G8GM1H8/28/2021 2:10:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118402435Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001404WIN-5T344G8GM1H8/28/2021 2:10:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118402434Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001404WIN-5T344G8GM1H8/28/2021 2:10:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118402433Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896WIN-5T344G8GM1H8/28/2021 2:10:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118402432Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001404WIN-5T344G8GM1H8/28/2021 2:10:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118402431Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896WIN-5T344G8GM1H8/28/2021 2:10:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118402430Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402429Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001404WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service terminated with the following error: The device is not ready.7023049152200-91873432398358118402428Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001384WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the stopped state.7036016384400-91873432398358118402427Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001384WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402426Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001404WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402425Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001404WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402424Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001404WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522423Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System13001688WIN-5T344G8GM1HS-1-5-198/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402422Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522421Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem13001568WIN-5T344G8GM1HS-1-5-198/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402420Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001404WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402419Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402418Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402417Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402416Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001384WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402415Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001404WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118402414Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001404WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118402413Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001404WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402412Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001384WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402411Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001384WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402410Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001264WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442409Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4584WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442408Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4584WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442407Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4584WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?08?-?28T14:10:03.393000000Z from ?2021?-?08?-?28T14:10:03.399039300Z. Change Reason: An application or system component changed the time.11450-92233720368547757922406Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem13001428WIN-5T344G8GM1HS-1-5-198/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402405Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800904WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402404Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800904WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402403Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001424WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402402Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402401Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DsmSvc service entered the running state.7036016384400-91873432398358118402400Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 10 keys and creating 2 modified pages.160400-92233720368547758082399Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem908940WIN-5T344G8GM1HS-1-5-188/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402398Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800880WIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118402397Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800880WIN-5T344G8GM1H8/28/2021 2:09:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppXSvc service entered the running state.7036016384400-91873432398358118402396Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800880WIN-5T344G8GM1H8/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082395Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082394Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4472WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118402393Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800880WIN-5T344G8GM1H8/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082392Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00WIN-5T344G8GM1H8/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082391Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4472WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082390Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4236WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082389Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082388Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00WIN-5T344G8GM1H8/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082387Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushservice service entered the running state.7036016384400-91873432398358118402386Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800880WIN-5T344G8GM1H8/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402385Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800880WIN-5T344G8GM1H8/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118402384Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800880WIN-5T344G8GM1H8/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DeviceInstall service entered the running state.7036016384400-91873432398358118402383Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800880WIN-5T344G8GM1H8/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402382Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800880WIN-5T344G8GM1H8/28/2021 2:09:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402381Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800880WIN-5T344G8GM1H8/28/2021 2:09:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402380Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800880WIN-5T344G8GM1H8/28/2021 2:09:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402379Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800900WIN-5T344G8GM1H8/28/2021 2:09:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402378Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896WIN-5T344G8GM1H8/28/2021 2:09:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402377Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896WIN-5T344G8GM1H8/28/2021 2:09:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402376Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896WIN-5T344G8GM1H8/28/2021 2:09:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402375Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896WIN-5T344G8GM1H8/28/2021 2:09:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082374Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem816820WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:54 PM528ab40d-9c16-0004-11b4-8a52169cd701systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042373Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem688692WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Default\NTUSER.DAT was cleared updating 126 keys and creating 18 modified pages.160400-92233720368547758082372Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 628 keys and creating 85 modified pages.160400-92233720368547758082371Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Administrator\NTUSER.DAT was cleared updating 1935 keys and creating 116 modified pages.160400-92233720368547758082370Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 128 keys and creating 20 modified pages.160400-92233720368547758082369Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 137 keys and creating 21 modified pages.160400-92233720368547758082368Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 80 keys and creating 7 modified pages.160400-92233720368547758082367Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4548WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 87 keys and creating 5 modified pages.160400-92233720368547758082366Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4532WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 229 keys and creating 27 modified pages.160400-92233720368547758082365Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4544WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 78917632 bytes and an ending size of 74686464 bytes.150400-92233720368547758082364Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4536WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 82 keys and creating 1 modified pages.160400-92233720368547758082363Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem484488WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 5177344 bytes and an ending size of 5169152 bytes.150400-92233720368547758082362Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4236WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082361Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082360Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082359Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082358Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082357Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082356Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802355Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48WIN-5T344G8GM1H8/28/2021 2:09:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802354Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4468WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442353Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682352VfpExtSystemWIN-5T344G8GM1H8/28/2021 2:09:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442351Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume \\?\Volume{be07386b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062350Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4188WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442349Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442348Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442347Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442346Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442345Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442344Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082343Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082342Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082341Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082340Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082339Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082338Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2021?-?08?-?28T14:09:31.485331300Z.120410-92233720368547756802337Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48WIN-5T344G8GM1HS-1-5-188/28/2021 2:09:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2018?-?01?-?19T09:48:14.082208700Z.130420-92233720368547756802336Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem42896WIN-5T344G8GM1H1/19/2018 9:48:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162335Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System520524WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service entered the stopped state.7036016384400-91873432398358118402334Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682333EventLogSystemWIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682332EventLogSystemWIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetBIOS name and DNS host name of this machine have been changed from WIN-5T344G8GM1H to WIN-C6EHRR59UPD.60113276840360287970189639682331EventLogSystemWIN-5T344G8GM1H8/28/2021 2:10:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402330Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402329Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402328Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402327Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402326Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402325Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402324Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402323Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service entered the stopped state.7036016384400-91873432398358118402322Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402321Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the stopped state.7036016384400-91873432398358118402320Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402319Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services service entered the stopped state.7036016384400-91873432398358118402318Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Software Shadow Copy Provider service entered the stopped state.7036016384400-91873432398358118402317Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402316Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402315Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402314Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services UserMode Port Redirector service entered the stopped state.7036016384400-91873432398358118402313Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561100WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402312Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656416WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402311Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656416WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2018?-?01?-?19T09:48:13.152000000Z from ?2018?-?01?-?19T09:48:13.164762500Z. Change Reason: An application or system component changed the time.11450-92233720368547757922310Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem12442300WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Credential Manager service entered the stopped state.7036016384400-91873432398358118402309Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561080WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402308Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6562116WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402307Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561048WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522306Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem4361300WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522305Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System4361360WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402304Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402303Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402302Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402301Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402300Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402299Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
User Logoff Notification for Customer Experience Improvement Program7002041102023058781935857827842298Microsoft-Windows-Winlogondbe9b383-7cf3-4331-91cc-a3cb16a3b538System584916WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682297EventLogSystemWIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CDPUserSvc_24762 service entered the stopped state.7036016384400-91873432398358118402296Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Sync Host_24762 service entered the stopped state.7036016384400-91873432398358118402295Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402294Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem820972WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the stopped state.7036016384400-91873432398358118402293Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Configuration service entered the stopped state.7036016384400-91873432398358118402292Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\System32\Sysprep\Sysprep.exe (WIN-5T344G8GM1H) has initiated the shutdown of computer WIN-5T344G8GM1H on behalf of user WIN-5T344G8GM1H\Administrator for the following reason: No title for this reason could be found Reason Code: 0x40002 Shutdown Type: shutdown Comment: 1074032768400-91873432398358118402291User32b0aa8734-56f7-41cc-b2f4-de228e98b946System448464WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Process C:\Windows\System32\Sysprep\sysprep.exe (process ID:4012) reset policy scheme from {381B4222-F694-41F0-9685-FF5BB260DF2E} to {381B4222-F694-41F0-9685-FF5BB260DF2E}120410046116860184273879042290Microsoft-Windows-UserModePowerServicece8dee0b-d539-4000-b0f8-77bed049c590System764316WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the running state.7036016384400-91873432398358118402289Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402288Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402287Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)1340300-92233720368547758082286Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem12441320WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the running state.7036016384400-91873432398358118402285Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402284Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402283Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TCP/IP NetBIOS Helper service entered the stopped state.7036016384400-91873432398358118402282Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TCP/IP NetBIOS Helper service was successfully sent a stop control. The reason specified was: 0x40030011 [Operating System: Network Connectivity (Planned)] Comment: None7042016384400-91873432398358118402281Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport Teredo Tunneling Pseudo-Interface, {8A97E6D0-A2AF-48AE-8BC2-FFC865CC4DF6}, had event Network Interface deleted while PNP Device still exists. Note that this event is provided for informational purpose and might not be an error always (Eg: In case of vSwitch which was recently un-installed or a LBFO team was removed)10317022023058430092137103582280Microsoft-Windows-NDIScdead503-17f5-4a3e-b7ae-df8cc2902eb9System9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AM8a97e6d0-a2af-48ae-8bc2-ffc865cc4df6systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoPnPSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' is halting60410030-92233720368547758082279Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem41984WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport Microsoft Hyper-V Network Adapter #2, {518CDFA4-5492-4D9E-BEAA-908825A4A289}, had event Network Interface deleted while PNP Device still exists. Note that this event is provided for informational purpose and might not be an error always (Eg: In case of vSwitch which was recently un-installed or a LBFO team was removed)10317022023058430092137103582278Microsoft-Windows-NDIScdead503-17f5-4a3e-b7ae-df8cc2902eb9System9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AM518cdfa4-5492-4d9e-beaa-908825a4a289systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoPnPSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)1340300-92233720368547758082277Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem12441800WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.{518CDFA4-5492-4D9E-BEAA-908825A4A289} is no longer active.42010400-92233720368547758082276Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System9761376WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082275Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118402274Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft-Windows-Kernel-PnP/Configuration log file was cleared.104041040-92233720368547758082273Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the VIA StorX Storage RAID Controller Windows Driver service was changed from demand start to boot start.7040016384400-91873432398358118402272Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the vsmraid service was changed from demand start to boot start.7040016384400-91873432398358118402271Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Universal Flash Storage (UFS) Driver service was changed from demand start to boot start.7040016384400-91873432398358118402270Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Standard NVM Express Driver service was changed from demand start to boot start.7040016384400-91873432398358118402269Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the stexstor service was changed from demand start to boot start.7040016384400-91873432398358118402268Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SiSRaid4 service was changed from demand start to boot start.7040016384400-91873432398358118402267Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SiSRaid2 service was changed from demand start to boot start.7040016384400-91873432398358118402266Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Storage Class Memory Bus Driver service was changed from demand start to boot start.7040016384400-91873432398358118402265Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SBP-2 Transport/Protocol Bus Driver service was changed from demand start to boot start.7040016384400-91873432398358118402264Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic [FCoE] STOR Miniport Inbox Driver (wx64) service was changed from demand start to boot start.7040016384400-91873432398358118402263Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic iSCSI Miniport Inbox Driver service was changed from demand start to boot start.7040016384400-91873432398358118402262Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Fibre Channel STOR Miniport Inbox Driver (wx64) service was changed from demand start to boot start.7040016384400-91873432398358118402261Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the percsas3i service was changed from demand start to boot start.7040016384400-91873432398358118402260Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the percsas2i service was changed from demand start to boot start.7040016384400-91873432398358118402259Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the pcmcia service was changed from demand start to boot start.7040016384400-91873432398358118402258Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nvraid service was changed from demand start to boot start.7040016384400-91873432398358118402257Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nvstor service was changed from demand start to boot start.7040016384400-91873432398358118402256Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic 10 Gigabit Ethernet Adapter VBD service was changed from demand start to boot start.7040016384400-91873432398358118402255Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Network Adapter VBD service was changed from demand start to boot start.7040016384400-91873432398358118402254Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the mvumis service was changed from demand start to boot start.7040016384400-91873432398358118402253Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Standard SATA AHCI Driver service was changed from demand start to boot start.7040016384400-91873432398358118402252Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the pciide service was changed from demand start to boot start.7040016384400-91873432398358118402251Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasr service was changed from demand start to boot start.7040016384400-91873432398358118402250Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasas2i service was changed from demand start to boot start.7040016384400-91873432398358118402249Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasas service was changed from demand start to boot start.7040016384400-91873432398358118402248Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the isapnp service was changed from demand start to boot start.7040016384400-91873432398358118402247Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SSS service was changed from demand start to boot start.7040016384400-91873432398358118402246Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS3i service was changed from demand start to boot start.7040016384400-91873432398358118402245Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS2i service was changed from demand start to boot start.7040016384400-91873432398358118402244Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS service was changed from demand start to boot start.7040016384400-91873432398358118402243Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Intel RAID Controller Windows 7 service was changed from demand start to boot start.7040016384400-91873432398358118402242Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Intel(R) SATA RAID Controller Windows service was changed from demand start to boot start.7040016384400-91873432398358118402241Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the HpSAMD service was changed from demand start to boot start.7040016384400-91873432398358118402240Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the elxstor service was changed from demand start to boot start.7040016384400-91873432398358118402239Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the elxfcoe service was changed from demand start to boot start.7040016384400-91873432398358118402238Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols service was changed from demand start to boot start.7040016384400-91873432398358118402237Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the cht4iscsi service was changed from demand start to boot start.7040016384400-91873432398358118402236Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Offload iSCSI Driver service was changed from demand start to boot start.7040016384400-91873432398358118402235Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic FCoE Offload driver service was changed from demand start to boot start.7040016384400-91873432398358118402234Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the bfadfcoei service was changed from demand start to boot start.7040016384400-91873432398358118402233Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the bfadi service was changed from demand start to boot start.7040016384400-91873432398358118402232Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Adaptec SAS/SATA-II RAID Storport's Miniport Driver service was changed from demand start to boot start.7040016384400-91873432398358118402231Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdsbs service was changed from demand start to boot start.7040016384400-91873432398358118402230Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdxata service was changed from demand start to boot start.7040016384400-91873432398358118402229Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdsata service was changed from demand start to boot start.7040016384400-91873432398358118402228Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the ADP80XX service was changed from demand start to boot start.7040016384400-91873432398358118402227Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the 3ware service was changed from demand start to boot start.7040016384400-91873432398358118402226Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402225Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402224Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the stopped state.7036016384400-91873432398358118402223Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the stopped state.7036016384400-91873432398358118402222Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the running state.7036016384400-91873432398358118402221Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Setup log file was cleared.104041040-92233720368547758082220Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Application log file was cleared.104041040-92233720368547758082219Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The System log file was cleared.104041040-92233720368547758082218Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]