MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
The Software Protection service entered the running state.7036016384400-91873432398358118403653Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:50:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403652Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:49:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403651Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:47:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403650Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:47:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C469FE35-001C-4DAE-AC6C-9846414C9BAB--20F92B48-4AE1-49C3-8727-02292A1DAD4E (Friendly Name: 14b18299-ae7a-4c76-852f-1a8ef610101c).2330400-92233720368547758083649Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem195632n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3295280693-1303248924-1184394412-287908153711/23/2021 3:46:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C469FE35-001C-4DAE-AC6C-9846414C9BAB--20F92B48-4AE1-49C3-8727-02292A1DAD4E successfully disconnected from port .2340400-92233720368547758083648Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem195632n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3295280693-1303248924-1184394412-287908153711/23/2021 3:46:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403647Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:46:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403646Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:45:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C469FE35-001C-4DAE-AC6C-9846414C9BAB--20F92B48-4AE1-49C3-8727-02292A1DAD4E (Friendly Name: 14b18299-ae7a-4c76-852f-1a8ef610101c) successfully connected to port 1C539138-BC77-4013-A042-046B65C2610B (Friendly Name: 14b18299-ae7a-4c76-852f-1a8ef610101c) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083645Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem195632n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3295280693-1303248924-1184394412-287908153711/23/2021 3:45:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C469FE35-001C-4DAE-AC6C-9846414C9BAB--20F92B48-4AE1-49C3-8727-02292A1DAD4E (Friendly Name: ).2330400-92233720368547758083644Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem195632n-h1-714676-12.cbci-714676-12.local11/23/2021 3:45:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403643Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:45:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the stopped state.7036016384400-91873432398358118403642Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:39:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403641Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:32:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5A63D63A-2F28-4142-B5E9-1F939A493228--B18F088A-BCE9-4015-8A3A-3EAEA6AD9A9F (Friendly Name: 96c2fdd8-7949-4161-9bd0-400ed8bd799a).2330400-92233720368547758083640Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26042440n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1516492346-1094856488-2468342197-67438428211/23/2021 3:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5A63D63A-2F28-4142-B5E9-1F939A493228--B18F088A-BCE9-4015-8A3A-3EAEA6AD9A9F successfully disconnected from port .2340400-92233720368547758083639Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26042440n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1516492346-1094856488-2468342197-67438428211/23/2021 3:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-78-7B-11 has moved from port 1D8CE3F0-B390-48D8-98EA-7889459F2247 (Friendly Name: 96c2fdd8-7949-4161-9bd0-400ed8bd799a) to port 1D8CE3F0-B390-48D8-98EA-7889459F2247 (Friendly Name: 96c2fdd8-7949-4161-9bd0-400ed8bd799a).250410180-92233720368547758083638Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044356n-h1-714676-12.cbci-714676-12.local11/23/2021 3:30:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-78-7B-11 has moved from port 14E3C264-3B65-4657-8DA6-7C9FADCDD18A (Friendly Name: br-data_External) to port 1D8CE3F0-B390-48D8-98EA-7889459F2247 (Friendly Name: 96c2fdd8-7949-4161-9bd0-400ed8bd799a).250410180-92233720368547758083637Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044356n-h1-714676-12.cbci-714676-12.local11/23/2021 3:30:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5A63D63A-2F28-4142-B5E9-1F939A493228--B18F088A-BCE9-4015-8A3A-3EAEA6AD9A9F (Friendly Name: 96c2fdd8-7949-4161-9bd0-400ed8bd799a) successfully connected to port 1D8CE3F0-B390-48D8-98EA-7889459F2247 (Friendly Name: 96c2fdd8-7949-4161-9bd0-400ed8bd799a) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083636Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26042440n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1516492346-1094856488-2468342197-67438428211/23/2021 3:30:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403635Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 3:30:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5A63D63A-2F28-4142-B5E9-1F939A493228--B18F088A-BCE9-4015-8A3A-3EAEA6AD9A9F (Friendly Name: ).2330400-92233720368547758083634Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26042780n-h1-714676-12.cbci-714676-12.local11/23/2021 3:29:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403633Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 3:26:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EB51A5D1-4D8C-4FA3-8218-6D127E9AD60C--75A1D5B8-6F3B-47CF-8373-16C1608F49F3 (Friendly Name: 9550a231-dc54-4f47-abf4-9f34af881087).2330400-92233720368547758083632Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36842844n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3947996625-1336102284-309139586-21539084611/23/2021 3:25:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EB51A5D1-4D8C-4FA3-8218-6D127E9AD60C--75A1D5B8-6F3B-47CF-8373-16C1608F49F3 successfully disconnected from port .2340400-92233720368547758083631Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36842844n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3947996625-1336102284-309139586-21539084611/23/2021 3:25:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EB51A5D1-4D8C-4FA3-8218-6D127E9AD60C--75A1D5B8-6F3B-47CF-8373-16C1608F49F3 (Friendly Name: 9550a231-dc54-4f47-abf4-9f34af881087) successfully connected to port 56F96FFE-0457-4042-9364-1C6C248C1CB4 (Friendly Name: 9550a231-dc54-4f47-abf4-9f34af881087) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083630Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36843956n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3947996625-1336102284-309139586-21539084611/23/2021 3:24:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EB51A5D1-4D8C-4FA3-8218-6D127E9AD60C--75A1D5B8-6F3B-47CF-8373-16C1608F49F3 (Friendly Name: ).2330400-92233720368547758083629Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36843956n-h1-714676-12.cbci-714676-12.local11/23/2021 3:24:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EB51A5D1-4D8C-4FA3-8218-6D127E9AD60C--75A1D5B8-6F3B-47CF-8373-16C1608F49F3 (Friendly Name: 9550a231-dc54-4f47-abf4-9f34af881087).2330400-92233720368547758083628Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17284180n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3947996625-1336102284-309139586-21539084611/23/2021 3:24:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EB51A5D1-4D8C-4FA3-8218-6D127E9AD60C--75A1D5B8-6F3B-47CF-8373-16C1608F49F3 successfully disconnected from port .2340400-92233720368547758083627Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17284180n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3947996625-1336102284-309139586-21539084611/23/2021 3:24:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403626Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:24:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403625Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EB51A5D1-4D8C-4FA3-8218-6D127E9AD60C--75A1D5B8-6F3B-47CF-8373-16C1608F49F3 (Friendly Name: 9550a231-dc54-4f47-abf4-9f34af881087) successfully connected to port 56F96FFE-0457-4042-9364-1C6C248C1CB4 (Friendly Name: 9550a231-dc54-4f47-abf4-9f34af881087) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083624Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17282112n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3947996625-1336102284-309139586-21539084611/23/2021 3:24:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EB51A5D1-4D8C-4FA3-8218-6D127E9AD60C--75A1D5B8-6F3B-47CF-8373-16C1608F49F3 (Friendly Name: ).2330400-92233720368547758083623Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17282112n-h1-714676-12.cbci-714676-12.local11/23/2021 3:24:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403622Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 3:24:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403621Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 3:23:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403620Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 3:22:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7751C434-75C4-4C9A-ADF4-07665E27E332--91E1A0A1-5253-4ADD-AEF7-99D490A655F1 (Friendly Name: 98f916d3-f34b-4442-b2d9-1d74b329b8b6).2330400-92233720368547758083619Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41761876n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2001847348-1285191108-1711797421-85374755011/23/2021 3:21:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7751C434-75C4-4C9A-ADF4-07665E27E332--91E1A0A1-5253-4ADD-AEF7-99D490A655F1 successfully disconnected from port .2340400-92233720368547758083618Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41761876n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2001847348-1285191108-1711797421-85374755011/23/2021 3:21:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7751C434-75C4-4C9A-ADF4-07665E27E332--91E1A0A1-5253-4ADD-AEF7-99D490A655F1 (Friendly Name: 98f916d3-f34b-4442-b2d9-1d74b329b8b6) successfully connected to port 902BA036-AB65-40F5-8C9A-C8877AF5D38D (Friendly Name: 98f916d3-f34b-4442-b2d9-1d74b329b8b6) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083617Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41764968n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2001847348-1285191108-1711797421-85374755011/23/2021 3:21:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7751C434-75C4-4C9A-ADF4-07665E27E332--91E1A0A1-5253-4ADD-AEF7-99D490A655F1 (Friendly Name: ).2330400-92233720368547758083616Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41764968n-h1-714676-12.cbci-714676-12.local11/23/2021 3:21:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A425710B-471E-437B-8AE1-C007CB58EDF5--80851C17-7A57-4A4C-9BC5-277AD27FBA6B (Friendly Name: 9e83b98e-8caf-4e89-b648-0a003492799e).2330400-92233720368547758083615Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4016740n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2753917195-1132152606-130081162-412597268311/23/2021 3:20:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A425710B-471E-437B-8AE1-C007CB58EDF5--80851C17-7A57-4A4C-9BC5-277AD27FBA6B successfully disconnected from port .2340400-92233720368547758083614Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4016740n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2753917195-1132152606-130081162-412597268311/23/2021 3:20:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-2D-AB-A3 has moved from port BB62DB1C-FC09-4283-890D-9AE1757861DC (Friendly Name: 9e83b98e-8caf-4e89-b648-0a003492799e) to port BB62DB1C-FC09-4283-890D-9AE1757861DC (Friendly Name: 9e83b98e-8caf-4e89-b648-0a003492799e).250410180-92233720368547758083613Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044196n-h1-714676-12.cbci-714676-12.local11/23/2021 3:20:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-2D-AB-A3 has moved from port 14E3C264-3B65-4657-8DA6-7C9FADCDD18A (Friendly Name: br-data_External) to port BB62DB1C-FC09-4283-890D-9AE1757861DC (Friendly Name: 9e83b98e-8caf-4e89-b648-0a003492799e).250410180-92233720368547758083612Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044200n-h1-714676-12.cbci-714676-12.local11/23/2021 3:20:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A425710B-471E-437B-8AE1-C007CB58EDF5--80851C17-7A57-4A4C-9BC5-277AD27FBA6B (Friendly Name: 9e83b98e-8caf-4e89-b648-0a003492799e) successfully connected to port BB62DB1C-FC09-4283-890D-9AE1757861DC (Friendly Name: 9e83b98e-8caf-4e89-b648-0a003492799e) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083611Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40164728n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2753917195-1132152606-130081162-412597268311/23/2021 3:20:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A425710B-471E-437B-8AE1-C007CB58EDF5--80851C17-7A57-4A4C-9BC5-277AD27FBA6B (Friendly Name: ).2330400-92233720368547758083610Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4016740n-h1-714676-12.cbci-714676-12.local11/23/2021 3:20:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403609Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:20:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the running state.7036016384400-91873432398358118403608Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:20:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403607Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8005096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:20:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403606Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 3:20:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the stopped state.7036016384400-91873432398358118403605Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 3:18:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A655D85B-B808-4BFF-976E-2C96BA888D8D--CE9B0EC6-1660-4CB3-93E4-A96B8A0DA5D1 (Friendly Name: 33b4ec90-3bb1-4c98-99d8-e108ea2bbf43).2330400-92233720368547758083604Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40284276n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2790643803-1275049992-2519494295-237486303411/23/2021 3:18:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A655D85B-B808-4BFF-976E-2C96BA888D8D--CE9B0EC6-1660-4CB3-93E4-A96B8A0DA5D1 successfully disconnected from port .2340400-92233720368547758083603Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40284276n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2790643803-1275049992-2519494295-237486303411/23/2021 3:18:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-91-B5-B6 has moved from port EF5281DB-F094-423B-B03F-CC2EA087A256 (Friendly Name: 33b4ec90-3bb1-4c98-99d8-e108ea2bbf43) to port EF5281DB-F094-423B-B03F-CC2EA087A256 (Friendly Name: 33b4ec90-3bb1-4c98-99d8-e108ea2bbf43).250410180-92233720368547758083602Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044356n-h1-714676-12.cbci-714676-12.local11/23/2021 3:18:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A655D85B-B808-4BFF-976E-2C96BA888D8D--CE9B0EC6-1660-4CB3-93E4-A96B8A0DA5D1 (Friendly Name: 33b4ec90-3bb1-4c98-99d8-e108ea2bbf43) successfully connected to port EF5281DB-F094-423B-B03F-CC2EA087A256 (Friendly Name: 33b4ec90-3bb1-4c98-99d8-e108ea2bbf43) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083601Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40282368n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2790643803-1275049992-2519494295-237486303411/23/2021 3:18:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A655D85B-B808-4BFF-976E-2C96BA888D8D--CE9B0EC6-1660-4CB3-93E4-A96B8A0DA5D1 (Friendly Name: ).2330400-92233720368547758083600Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40282368n-h1-714676-12.cbci-714676-12.local11/23/2021 3:18:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D7BD0FCE-8B6D-4606-AE8F-B4A65622A9B3--EA101493-E57E-4962-A5C3-473E8C635982 (Friendly Name: 33b4ec90-3bb1-4c98-99d8-e108ea2bbf43).2330400-92233720368547758083599Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26201240n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3619491790-1174834029-2796851118-301420603811/23/2021 3:17:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D7BD0FCE-8B6D-4606-AE8F-B4A65622A9B3--EA101493-E57E-4962-A5C3-473E8C635982 successfully disconnected from port .2340400-92233720368547758083598Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26201240n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3619491790-1174834029-2796851118-301420603811/23/2021 3:17:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403597Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 3:16:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D7BD0FCE-8B6D-4606-AE8F-B4A65622A9B3--EA101493-E57E-4962-A5C3-473E8C635982 (Friendly Name: 33b4ec90-3bb1-4c98-99d8-e108ea2bbf43) successfully connected to port 3DFE4761-F34E-43C6-A08B-8F016FE1D0F8 (Friendly Name: 33b4ec90-3bb1-4c98-99d8-e108ea2bbf43) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083596Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26201240n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3619491790-1174834029-2796851118-301420603811/23/2021 3:15:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D7BD0FCE-8B6D-4606-AE8F-B4A65622A9B3--EA101493-E57E-4962-A5C3-473E8C635982 (Friendly Name: ).2330400-92233720368547758083595Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26201240n-h1-714676-12.cbci-714676-12.local11/23/2021 3:15:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403594Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 3:15:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403593Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 3:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E1DEBE65-80FB-43E9-808A-9C6CB194ABDB--B5D85D4E-1DA9-42A0-B686-E1828B2C30BD (Friendly Name: 70b76804-3d46-44ec-bc25-139c62144556).2330400-92233720368547758083592Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4412172n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3789471333-1139376379-1822198400-368545502511/23/2021 3:15:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E1DEBE65-80FB-43E9-808A-9C6CB194ABDB--B5D85D4E-1DA9-42A0-B686-E1828B2C30BD successfully disconnected from port .2340400-92233720368547758083591Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4412172n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3789471333-1139376379-1822198400-368545502511/23/2021 3:15:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403590Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 3:13:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E1DEBE65-80FB-43E9-808A-9C6CB194ABDB--B5D85D4E-1DA9-42A0-B686-E1828B2C30BD (Friendly Name: 70b76804-3d46-44ec-bc25-139c62144556) successfully connected to port 538EE45B-FA9D-4B23-A0A3-7541FE5EB276 (Friendly Name: 70b76804-3d46-44ec-bc25-139c62144556) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083589Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44121956n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3789471333-1139376379-1822198400-368545502511/23/2021 3:13:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E1DEBE65-80FB-43E9-808A-9C6CB194ABDB--B5D85D4E-1DA9-42A0-B686-E1828B2C30BD (Friendly Name: ).2330400-92233720368547758083588Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44121956n-h1-714676-12.cbci-714676-12.local11/23/2021 3:13:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403587Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 3:13:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 82745FA5-D5A7-48C6-90DB-363C4924CC8A--78D5B288-864E-40BF-8021-DF91697927C5 (Friendly Name: 5215a5ab-467f-4a6f-af44-67c4abd11944).2330400-92233720368547758083586Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26401536n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2188664741-1220990375-1010228112-232863444111/23/2021 3:13:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 82745FA5-D5A7-48C6-90DB-363C4924CC8A--78D5B288-864E-40BF-8021-DF91697927C5 successfully disconnected from port .2340400-92233720368547758083585Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26401536n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2188664741-1220990375-1010228112-232863444111/23/2021 3:13:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403584Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 3:12:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 82745FA5-D5A7-48C6-90DB-363C4924CC8A--78D5B288-864E-40BF-8021-DF91697927C5 (Friendly Name: 5215a5ab-467f-4a6f-af44-67c4abd11944) successfully connected to port 02CEF795-669B-42EF-9D84-0A70ED01019E (Friendly Name: 5215a5ab-467f-4a6f-af44-67c4abd11944) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083583Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26401536n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2188664741-1220990375-1010228112-232863444111/23/2021 3:11:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 82745FA5-D5A7-48C6-90DB-363C4924CC8A--78D5B288-864E-40BF-8021-DF91697927C5 (Friendly Name: ).2330400-92233720368547758083582Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26401536n-h1-714676-12.cbci-714676-12.local11/23/2021 3:11:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0C7A533D-9B2B-45A7-A305-E2FC1D550E40--9A9CC334-003C-4342-84A9-F11F4840680D (Friendly Name: 5d9439e9-24af-435a-8df7-39a6b705b1b1).2330400-92233720368547758083581Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30963444n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-209343293-1168612139-4242671011-107468111711/23/2021 3:11:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0C7A533D-9B2B-45A7-A305-E2FC1D550E40--9A9CC334-003C-4342-84A9-F11F4840680D successfully disconnected from port .2340400-92233720368547758083580Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30963444n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-209343293-1168612139-4242671011-107468111711/23/2021 3:11:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-C9-30-FE has moved from port 8AA2D8CC-C3EC-4CD6-BD6A-BEBC45D00943 (Friendly Name: 5d9439e9-24af-435a-8df7-39a6b705b1b1) to port 8AA2D8CC-C3EC-4CD6-BD6A-BEBC45D00943 (Friendly Name: 5d9439e9-24af-435a-8df7-39a6b705b1b1).250410180-92233720368547758083579Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044192n-h1-714676-12.cbci-714676-12.local11/23/2021 3:11:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-C9-30-FE has moved from port 14E3C264-3B65-4657-8DA6-7C9FADCDD18A (Friendly Name: br-data_External) to port 8AA2D8CC-C3EC-4CD6-BD6A-BEBC45D00943 (Friendly Name: 5d9439e9-24af-435a-8df7-39a6b705b1b1).250410180-92233720368547758083578Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044200n-h1-714676-12.cbci-714676-12.local11/23/2021 3:11:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0C7A533D-9B2B-45A7-A305-E2FC1D550E40--9A9CC334-003C-4342-84A9-F11F4840680D (Friendly Name: 5d9439e9-24af-435a-8df7-39a6b705b1b1) successfully connected to port 8AA2D8CC-C3EC-4CD6-BD6A-BEBC45D00943 (Friendly Name: 5d9439e9-24af-435a-8df7-39a6b705b1b1) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083577Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30964464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-209343293-1168612139-4242671011-107468111711/23/2021 3:11:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0C7A533D-9B2B-45A7-A305-E2FC1D550E40--9A9CC334-003C-4342-84A9-F11F4840680D (Friendly Name: ).2330400-92233720368547758083576Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30964164n-h1-714676-12.cbci-714676-12.local11/23/2021 3:11:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 77AA339A-DE57-4A23-A21A-F344CDD094BC--DE895A1F-63B4-4FA4-9A15-F7C0CDF84878 (Friendly Name: cee7381f-b32a-4f7c-ab2d-08e771d4b1fa).2330400-92233720368547758083575Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47804828n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2007643034-1243864663-1156782754-316386938911/23/2021 3:10:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 77AA339A-DE57-4A23-A21A-F344CDD094BC--DE895A1F-63B4-4FA4-9A15-F7C0CDF84878 successfully disconnected from port .2340400-92233720368547758083574Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47804828n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2007643034-1243864663-1156782754-316386938911/23/2021 3:10:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 77AA339A-DE57-4A23-A21A-F344CDD094BC--DE895A1F-63B4-4FA4-9A15-F7C0CDF84878 (Friendly Name: cee7381f-b32a-4f7c-ab2d-08e771d4b1fa) successfully connected to port 4FCBDCFB-085F-4BD2-9F56-22C31EB34E54 (Friendly Name: cee7381f-b32a-4f7c-ab2d-08e771d4b1fa) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083573Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47804828n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2007643034-1243864663-1156782754-316386938911/23/2021 3:09:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 77AA339A-DE57-4A23-A21A-F344CDD094BC--DE895A1F-63B4-4FA4-9A15-F7C0CDF84878 (Friendly Name: ).2330400-92233720368547758083572Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47804828n-h1-714676-12.cbci-714676-12.local11/23/2021 3:09:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 93D52D15-D518-4933-83E8-CF2DF6961982--BD6424DD-829B-462D-A20B-0FE59D00BAB6 (Friendly Name: ff593f2e-ad08-4cbc-8088-d9fef4aa65a3).2330400-92233720368547758083571Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23444640n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2480221461-1228133656-768600195-218271512611/23/2021 3:09:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 93D52D15-D518-4933-83E8-CF2DF6961982--BD6424DD-829B-462D-A20B-0FE59D00BAB6 successfully disconnected from port .2340400-92233720368547758083570Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23444640n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2480221461-1228133656-768600195-218271512611/23/2021 3:09:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-E5-05-4C has moved from port 648C60F3-70DB-4067-9DE1-9977D62B1C85 (Friendly Name: ff593f2e-ad08-4cbc-8088-d9fef4aa65a3) to port 648C60F3-70DB-4067-9DE1-9977D62B1C85 (Friendly Name: ff593f2e-ad08-4cbc-8088-d9fef4aa65a3).250410180-92233720368547758083569Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044192n-h1-714676-12.cbci-714676-12.local11/23/2021 3:09:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-E5-05-4C has moved from port 14E3C264-3B65-4657-8DA6-7C9FADCDD18A (Friendly Name: br-data_External) to port 648C60F3-70DB-4067-9DE1-9977D62B1C85 (Friendly Name: ff593f2e-ad08-4cbc-8088-d9fef4aa65a3).250410180-92233720368547758083568Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044192n-h1-714676-12.cbci-714676-12.local11/23/2021 3:09:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 93D52D15-D518-4933-83E8-CF2DF6961982--BD6424DD-829B-462D-A20B-0FE59D00BAB6 (Friendly Name: ff593f2e-ad08-4cbc-8088-d9fef4aa65a3) successfully connected to port 648C60F3-70DB-4067-9DE1-9977D62B1C85 (Friendly Name: ff593f2e-ad08-4cbc-8088-d9fef4aa65a3) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083567Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23444820n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2480221461-1228133656-768600195-218271512611/23/2021 3:09:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403566Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 3:09:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 93D52D15-D518-4933-83E8-CF2DF6961982--BD6424DD-829B-462D-A20B-0FE59D00BAB6 (Friendly Name: ).2330400-92233720368547758083565Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23444640n-h1-714676-12.cbci-714676-12.local11/23/2021 3:09:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403564Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 3:05:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403563Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 3:05:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 94319EF9-8BD2-4A17-8691-888EA8098EA6--A438AF77-BBB1-4759-86AB-C11FAD3CB64D (Friendly Name: c7134f4f-f609-42bd-b4a6-e65127b6435b).2330400-92233720368547758083562Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43164608n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2486279929-1243057106-2391314822-279432644011/23/2021 3:04:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 94319EF9-8BD2-4A17-8691-888EA8098EA6--A438AF77-BBB1-4759-86AB-C11FAD3CB64D successfully disconnected from port .2340400-92233720368547758083561Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43164608n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2486279929-1243057106-2391314822-279432644011/23/2021 3:04:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 03BEAAC6-EEDE-4E10-A894-B95420B695A8--86E491E7-DE7A-4472-9CDD-477F307C992F (Friendly Name: 96a305c8-0da4-40ba-9aa7-a0cb78745ee1).2330400-92233720368547758083560Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45001260n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-62827206-1309732574-1421448360-282838377611/23/2021 3:04:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 03BEAAC6-EEDE-4E10-A894-B95420B695A8--86E491E7-DE7A-4472-9CDD-477F307C992F successfully disconnected from port .2340400-92233720368547758083559Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45001260n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-62827206-1309732574-1421448360-282838377611/23/2021 3:04:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 19045553-9138-4D32-A1A0-B943E41B55B7--389F8AB0-39EC-42D4-BD08-981AA9B9067E (Friendly Name: 2a862d54-d929-4b45-9897-7629d7b0eacf).2330400-92233720368547758083558Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38845096n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-419714387-1295159608-1136238753-307580822811/23/2021 3:04:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 19045553-9138-4D32-A1A0-B943E41B55B7--389F8AB0-39EC-42D4-BD08-981AA9B9067E successfully disconnected from port .2340400-92233720368547758083557Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38845096n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-419714387-1295159608-1136238753-307580822811/23/2021 3:04:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 19045553-9138-4D32-A1A0-B943E41B55B7--389F8AB0-39EC-42D4-BD08-981AA9B9067E (Friendly Name: 2a862d54-d929-4b45-9897-7629d7b0eacf) successfully connected to port 65090149-B28A-4C14-B55D-D1EA5EC161D0 (Friendly Name: 2a862d54-d929-4b45-9897-7629d7b0eacf) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083556Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38845096n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-419714387-1295159608-1136238753-307580822811/23/2021 3:03:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 19045553-9138-4D32-A1A0-B943E41B55B7--389F8AB0-39EC-42D4-BD08-981AA9B9067E (Friendly Name: ).2330400-92233720368547758083555Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38845096n-h1-714676-12.cbci-714676-12.local11/23/2021 3:03:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 03BEAAC6-EEDE-4E10-A894-B95420B695A8--86E491E7-DE7A-4472-9CDD-477F307C992F (Friendly Name: 96a305c8-0da4-40ba-9aa7-a0cb78745ee1) successfully connected to port B372BEF6-FCD6-46FE-B62C-4FB2CD586C07 (Friendly Name: 96a305c8-0da4-40ba-9aa7-a0cb78745ee1) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083554Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45001260n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-62827206-1309732574-1421448360-282838377611/23/2021 3:03:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 03BEAAC6-EEDE-4E10-A894-B95420B695A8--86E491E7-DE7A-4472-9CDD-477F307C992F (Friendly Name: ).2330400-92233720368547758083553Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45001260n-h1-714676-12.cbci-714676-12.local11/23/2021 3:03:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403552Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 3:02:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 94319EF9-8BD2-4A17-8691-888EA8098EA6--A438AF77-BBB1-4759-86AB-C11FAD3CB64D (Friendly Name: c7134f4f-f609-42bd-b4a6-e65127b6435b) successfully connected to port 53D7CD68-6807-4309-A82B-4387C7208FA5 (Friendly Name: c7134f4f-f609-42bd-b4a6-e65127b6435b) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083551Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43164608n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2486279929-1243057106-2391314822-279432644011/23/2021 3:02:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 94319EF9-8BD2-4A17-8691-888EA8098EA6--A438AF77-BBB1-4759-86AB-C11FAD3CB64D (Friendly Name: ).2330400-92233720368547758083550Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43164608n-h1-714676-12.cbci-714676-12.local11/23/2021 3:02:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403549Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 3:02:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403548Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 3:00:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A087A342-B5EE-483A-9202-AF5A1C62B5E8--3EDAAD77-2EA3-41C1-B744-6144FED560A5 (Friendly Name: b4b3d3fa-f2c3-43ea-9ed2-f037de3000ba).2330400-92233720368547758083547Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45083436n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2693243714-1211807214-1521418898-390420124411/23/2021 3:00:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A087A342-B5EE-483A-9202-AF5A1C62B5E8--3EDAAD77-2EA3-41C1-B744-6144FED560A5 successfully disconnected from port .2340400-92233720368547758083546Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45083436n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2693243714-1211807214-1521418898-390420124411/23/2021 3:00:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A087A342-B5EE-483A-9202-AF5A1C62B5E8--3EDAAD77-2EA3-41C1-B744-6144FED560A5 (Friendly Name: b4b3d3fa-f2c3-43ea-9ed2-f037de3000ba) successfully connected to port 632BDF72-32F5-425C-8CA5-1C457F39CE87 (Friendly Name: b4b3d3fa-f2c3-43ea-9ed2-f037de3000ba) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083545Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45084228n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2693243714-1211807214-1521418898-390420124411/23/2021 2:59:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A087A342-B5EE-483A-9202-AF5A1C62B5E8--3EDAAD77-2EA3-41C1-B744-6144FED560A5 (Friendly Name: ).2330400-92233720368547758083544Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45084228n-h1-714676-12.cbci-714676-12.local11/23/2021 2:59:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403543Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:58:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403542Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:58:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EEFAA795-C242-4632-89C8-734B779D226E--75524261-0A38-4063-8B5F-F980A1545887 (Friendly Name: b64d89c9-179c-47d1-b126-ef442238c7f8).2330400-92233720368547758083541Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4268836n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4009404309-1177731650-1265879177-184776229511/23/2021 2:58:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EEFAA795-C242-4632-89C8-734B779D226E--75524261-0A38-4063-8B5F-F980A1545887 successfully disconnected from port .2340400-92233720368547758083540Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4268836n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4009404309-1177731650-1265879177-184776229511/23/2021 2:58:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 74FB211A-3EF3-46D7-B231-379B0177E2CD--1DDD69D2-971B-492A-853D-EB35CCAD28FF (Friendly Name: 0c12a38e-7035-4399-a5f0-afaa3d871238).2330400-92233720368547758083539Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20563040n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1962615066-1188511475-2604085682-345417088111/23/2021 2:58:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 74FB211A-3EF3-46D7-B231-379B0177E2CD--1DDD69D2-971B-492A-853D-EB35CCAD28FF successfully disconnected from port .2340400-92233720368547758083538Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20563040n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1962615066-1188511475-2604085682-345417088111/23/2021 2:58:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2E64412E-8947-488D-892C-6F679C1D29D6--67931E01-8C2B-4E7A-B1D1-F0672A984138 (Friendly Name: 58c64031-f3f1-4f42-b895-a3e7b436ef3e).2330400-92233720368547758083537Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48484424n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-778322222-1217235271-1735339145-359301878011/23/2021 2:56:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2E64412E-8947-488D-892C-6F679C1D29D6--67931E01-8C2B-4E7A-B1D1-F0672A984138 successfully disconnected from port .2340400-92233720368547758083536Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48484424n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-778322222-1217235271-1735339145-359301878011/23/2021 2:56:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 74FB211A-3EF3-46D7-B231-379B0177E2CD--1DDD69D2-971B-492A-853D-EB35CCAD28FF (Friendly Name: 0c12a38e-7035-4399-a5f0-afaa3d871238) successfully connected to port E03E968A-5560-4888-9014-DC74C8DBB4F9 (Friendly Name: 0c12a38e-7035-4399-a5f0-afaa3d871238) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083535Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20562212n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1962615066-1188511475-2604085682-345417088111/23/2021 2:56:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 74FB211A-3EF3-46D7-B231-379B0177E2CD--1DDD69D2-971B-492A-853D-EB35CCAD28FF (Friendly Name: ).2330400-92233720368547758083534Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20562212n-h1-714676-12.cbci-714676-12.local11/23/2021 2:56:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-A3-E4-76 has moved from port 14E3C264-3B65-4657-8DA6-7C9FADCDD18A (Friendly Name: br-data_External) to port FC132281-D1F9-489C-ABF5-A3A56F058514 (Friendly Name: 58c64031-f3f1-4f42-b895-a3e7b436ef3e).250410180-92233720368547758083533Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem00n-h1-714676-12.cbci-714676-12.local11/23/2021 2:56:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2E64412E-8947-488D-892C-6F679C1D29D6--67931E01-8C2B-4E7A-B1D1-F0672A984138 (Friendly Name: 58c64031-f3f1-4f42-b895-a3e7b436ef3e) successfully connected to port FC132281-D1F9-489C-ABF5-A3A56F058514 (Friendly Name: 58c64031-f3f1-4f42-b895-a3e7b436ef3e) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083532Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48484040n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-778322222-1217235271-1735339145-359301878011/23/2021 2:56:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2E64412E-8947-488D-892C-6F679C1D29D6--67931E01-8C2B-4E7A-B1D1-F0672A984138 (Friendly Name: ).2330400-92233720368547758083531Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48484040n-h1-714676-12.cbci-714676-12.local11/23/2021 2:56:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403530Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800548n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:56:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403529Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800548n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:56:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403528Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800548n-h1-714676-12.cbci-714676-12.local11/23/2021 2:56:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403527Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 2:56:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403526Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:56:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D7BFF744-79DC-4E93-9A72-F3CFFF38CCAA--D9D77079-C572-40FB-8D36-C71CEE1BFC35 (Friendly Name: 2ee89df3-ca48-431c-808c-47862cf1acf7).2330400-92233720368547758083525Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1360216n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3619682116-1318287836-3488838298-286551065511/23/2021 2:56:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D7BFF744-79DC-4E93-9A72-F3CFFF38CCAA--D9D77079-C572-40FB-8D36-C71CEE1BFC35 successfully disconnected from port .2340400-92233720368547758083524Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1360216n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3619682116-1318287836-3488838298-286551065511/23/2021 2:56:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D7BFF744-79DC-4E93-9A72-F3CFFF38CCAA--D9D77079-C572-40FB-8D36-C71CEE1BFC35 (Friendly Name: 2ee89df3-ca48-431c-808c-47862cf1acf7) successfully connected to port 4941C896-048A-4C21-B8D5-8AE4063BCEFD (Friendly Name: 2ee89df3-ca48-431c-808c-47862cf1acf7) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083523Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13604716n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3619682116-1318287836-3488838298-286551065511/23/2021 2:55:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D7BFF744-79DC-4E93-9A72-F3CFFF38CCAA--D9D77079-C572-40FB-8D36-C71CEE1BFC35 (Friendly Name: ).2330400-92233720368547758083522Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13604716n-h1-714676-12.cbci-714676-12.local11/23/2021 2:55:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118403521Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8003192n-h1-714676-12.cbci-714676-12.local11/23/2021 2:55:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A85D8159-56A0-42C8-8E2D-808197B62828--37EBDC45-F82F-4000-82C3-0679855ED802 (Friendly Name: 85c55ecb-4cb6-455f-b758-8badd1ce8062).2330400-92233720368547758083520Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34644628n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2824700249-1120425632-2172661134-67375682311/23/2021 2:55:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A85D8159-56A0-42C8-8E2D-808197B62828--37EBDC45-F82F-4000-82C3-0679855ED802 successfully disconnected from port .2340400-92233720368547758083519Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34644628n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2824700249-1120425632-2172661134-67375682311/23/2021 2:55:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A85D8159-56A0-42C8-8E2D-808197B62828--37EBDC45-F82F-4000-82C3-0679855ED802 (Friendly Name: 85c55ecb-4cb6-455f-b758-8badd1ce8062) successfully connected to port 29FF708A-A072-4C8A-9254-F7A84436AA21 (Friendly Name: 85c55ecb-4cb6-455f-b758-8badd1ce8062) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083518Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34644628n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2824700249-1120425632-2172661134-67375682311/23/2021 2:54:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A85D8159-56A0-42C8-8E2D-808197B62828--37EBDC45-F82F-4000-82C3-0679855ED802 (Friendly Name: ).2330400-92233720368547758083517Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34644628n-h1-714676-12.cbci-714676-12.local11/23/2021 2:54:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A85D8159-56A0-42C8-8E2D-808197B62828--37EBDC45-F82F-4000-82C3-0679855ED802 (Friendly Name: 85c55ecb-4cb6-455f-b758-8badd1ce8062).2330400-92233720368547758083516Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28764012n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2824700249-1120425632-2172661134-67375682311/23/2021 2:54:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A85D8159-56A0-42C8-8E2D-808197B62828--37EBDC45-F82F-4000-82C3-0679855ED802 successfully disconnected from port .2340400-92233720368547758083515Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28764012n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2824700249-1120425632-2172661134-67375682311/23/2021 2:54:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A85D8159-56A0-42C8-8E2D-808197B62828--37EBDC45-F82F-4000-82C3-0679855ED802 (Friendly Name: 85c55ecb-4cb6-455f-b758-8badd1ce8062) successfully connected to port 29FF708A-A072-4C8A-9254-F7A84436AA21 (Friendly Name: 85c55ecb-4cb6-455f-b758-8badd1ce8062) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083514Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28764012n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2824700249-1120425632-2172661134-67375682311/23/2021 2:54:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A85D8159-56A0-42C8-8E2D-808197B62828--37EBDC45-F82F-4000-82C3-0679855ED802 (Friendly Name: ).2330400-92233720368547758083513Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28764012n-h1-714676-12.cbci-714676-12.local11/23/2021 2:54:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic FAB86C27-E16A-4616-A0B9-0B48CDCE0426--2D4CADB9-3591-4EFF-93B3-0FAE4D6E1737 (Friendly Name: 8edb647e-d56d-4eee-80f3-ddac08b4b0b2).2330400-92233720368547758083512Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30764788n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4206390311-1175904618-1208727968-63784929311/23/2021 2:54:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FAB86C27-E16A-4616-A0B9-0B48CDCE0426--2D4CADB9-3591-4EFF-93B3-0FAE4D6E1737 successfully disconnected from port .2340400-92233720368547758083511Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30764788n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4206390311-1175904618-1208727968-63784929311/23/2021 2:54:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FAB86C27-E16A-4616-A0B9-0B48CDCE0426--2D4CADB9-3591-4EFF-93B3-0FAE4D6E1737 (Friendly Name: 8edb647e-d56d-4eee-80f3-ddac08b4b0b2) successfully connected to port 1EBF423D-D8E5-4003-A849-F52389BA4F4D (Friendly Name: 8edb647e-d56d-4eee-80f3-ddac08b4b0b2) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083510Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30762372n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4206390311-1175904618-1208727968-63784929311/23/2021 2:54:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EEFAA795-C242-4632-89C8-734B779D226E--75524261-0A38-4063-8B5F-F980A1545887 (Friendly Name: b64d89c9-179c-47d1-b126-ef442238c7f8) successfully connected to port F9F70804-0B3F-408C-A8B3-5475B9BD17D9 (Friendly Name: b64d89c9-179c-47d1-b126-ef442238c7f8) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083509Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4268836n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4009404309-1177731650-1265879177-184776229511/23/2021 2:54:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EEFAA795-C242-4632-89C8-734B779D226E--75524261-0A38-4063-8B5F-F980A1545887 (Friendly Name: ).2330400-92233720368547758083508Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4268836n-h1-714676-12.cbci-714676-12.local11/23/2021 2:54:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic FAB86C27-E16A-4616-A0B9-0B48CDCE0426--2D4CADB9-3591-4EFF-93B3-0FAE4D6E1737 (Friendly Name: ).2330400-92233720368547758083507Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30764788n-h1-714676-12.cbci-714676-12.local11/23/2021 2:54:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403506Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8003192n-h1-714676-12.cbci-714676-12.local11/23/2021 2:54:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic DB6C334A-99BD-46F9-B6D9-C047F45274FE--F3D1E962-585B-4F35-A557-316B336F7541 (Friendly Name: 943a075f-5c36-407b-9315-805c83ed2e5c).2330400-92233720368547758083505Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47204876n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3681301322-1190762941-1203820982-426903627611/23/2021 2:54:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DB6C334A-99BD-46F9-B6D9-C047F45274FE--F3D1E962-585B-4F35-A557-316B336F7541 successfully disconnected from port .2340400-92233720368547758083504Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47204876n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3681301322-1190762941-1203820982-426903627611/23/2021 2:54:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B3C972C4-53DB-44AE-BB41-ECB40E2C1EE5--F9170972-31E8-4FAB-8FB1-C7C9BB59EED2 (Friendly Name: 2777fd23-a38b-46a0-bb05-1d1a4cb56cc2).2330400-92233720368547758083503Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31641256n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3016323780-1152275419-3035382203-384395982211/23/2021 2:53:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B3C972C4-53DB-44AE-BB41-ECB40E2C1EE5--F9170972-31E8-4FAB-8FB1-C7C9BB59EED2 successfully disconnected from port .2340400-92233720368547758083502Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31641256n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3016323780-1152275419-3035382203-384395982211/23/2021 2:53:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0BE6495A-AC6D-4CD2-9E3A-685D1A0AE91B--9DBE5495-87EB-4FD0-A8EF-7D7FFC7A9A1A (Friendly Name: a722cceb-25c9-4c44-aa47-a22c85321928).2330400-92233720368547758083501Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1240540n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-199641434-1288875117-1567111838-46825730611/23/2021 2:53:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0BE6495A-AC6D-4CD2-9E3A-685D1A0AE91B--9DBE5495-87EB-4FD0-A8EF-7D7FFC7A9A1A successfully disconnected from port .2340400-92233720368547758083500Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1240540n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-199641434-1288875117-1567111838-46825730611/23/2021 2:53:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A8020717-A7C3-4242-99D9-D17A00A5B1ED--C1D8675F-3EB6-4A4A-8206-BABE024BB954 (Friendly Name: 020b7a8b-88ba-46e4-834f-75d9452c59b1).2330400-92233720368547758083499Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17722620n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2818705175-1111664579-2060573081-398784230411/23/2021 2:53:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A8020717-A7C3-4242-99D9-D17A00A5B1ED--C1D8675F-3EB6-4A4A-8206-BABE024BB954 successfully disconnected from port .2340400-92233720368547758083498Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17722620n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2818705175-1111664579-2060573081-398784230411/23/2021 2:53:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403497Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:53:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A8020717-A7C3-4242-99D9-D17A00A5B1ED--C1D8675F-3EB6-4A4A-8206-BABE024BB954 (Friendly Name: 020b7a8b-88ba-46e4-834f-75d9452c59b1) successfully connected to port CEDDC5EB-4986-4A8F-AC8C-B34057E8269E (Friendly Name: 020b7a8b-88ba-46e4-834f-75d9452c59b1) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083496Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17724764n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2818705175-1111664579-2060573081-398784230411/23/2021 2:53:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A8020717-A7C3-4242-99D9-D17A00A5B1ED--C1D8675F-3EB6-4A4A-8206-BABE024BB954 (Friendly Name: ).2330400-92233720368547758083495Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17724764n-h1-714676-12.cbci-714676-12.local11/23/2021 2:53:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 47584A1F-1C35-4B53-95DA-9BAB1894C77F--6335FC52-06A8-4944-A9A6-8C2239B550F4 (Friendly Name: 87a26d47-da26-49b5-9c46-733cedfb416b).2330400-92233720368547758083494Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem378492n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1196968479-1263737909-2879117973-214378600811/23/2021 2:53:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 47584A1F-1C35-4B53-95DA-9BAB1894C77F--6335FC52-06A8-4944-A9A6-8C2239B550F4 successfully disconnected from port .2340400-92233720368547758083493Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem378492n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1196968479-1263737909-2879117973-214378600811/23/2021 2:53:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-58-F8-40 has moved from port 8ED90FF0-B88B-4F67-A67A-3208816873D8 (Friendly Name: 87a26d47-da26-49b5-9c46-733cedfb416b) to port 8ED90FF0-B88B-4F67-A67A-3208816873D8 (Friendly Name: 87a26d47-da26-49b5-9c46-733cedfb416b).250410180-92233720368547758083492Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044196n-h1-714676-12.cbci-714676-12.local11/23/2021 2:52:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-58-F8-40 has moved from port 14E3C264-3B65-4657-8DA6-7C9FADCDD18A (Friendly Name: br-data_External) to port 8ED90FF0-B88B-4F67-A67A-3208816873D8 (Friendly Name: 87a26d47-da26-49b5-9c46-733cedfb416b).250410180-92233720368547758083491Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044196n-h1-714676-12.cbci-714676-12.local11/23/2021 2:52:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 47584A1F-1C35-4B53-95DA-9BAB1894C77F--6335FC52-06A8-4944-A9A6-8C2239B550F4 (Friendly Name: 87a26d47-da26-49b5-9c46-733cedfb416b) successfully connected to port 8ED90FF0-B88B-4F67-A67A-3208816873D8 (Friendly Name: 87a26d47-da26-49b5-9c46-733cedfb416b) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083490Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem378492n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1196968479-1263737909-2879117973-214378600811/23/2021 2:52:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 47584A1F-1C35-4B53-95DA-9BAB1894C77F--6335FC52-06A8-4944-A9A6-8C2239B550F4 (Friendly Name: ).2330400-92233720368547758083489Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem378492n-h1-714676-12.cbci-714676-12.local11/23/2021 2:52:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0BE6495A-AC6D-4CD2-9E3A-685D1A0AE91B--9DBE5495-87EB-4FD0-A8EF-7D7FFC7A9A1A (Friendly Name: a722cceb-25c9-4c44-aa47-a22c85321928) successfully connected to port CC3CC3B9-1CEB-43E9-9FC7-6DDB1B7D3D56 (Friendly Name: a722cceb-25c9-4c44-aa47-a22c85321928) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083488Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1240540n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-199641434-1288875117-1567111838-46825730611/23/2021 2:52:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0BE6495A-AC6D-4CD2-9E3A-685D1A0AE91B--9DBE5495-87EB-4FD0-A8EF-7D7FFC7A9A1A (Friendly Name: ).2330400-92233720368547758083487Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1240540n-h1-714676-12.cbci-714676-12.local11/23/2021 2:52:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B3C972C4-53DB-44AE-BB41-ECB40E2C1EE5--F9170972-31E8-4FAB-8FB1-C7C9BB59EED2 (Friendly Name: 2777fd23-a38b-46a0-bb05-1d1a4cb56cc2) successfully connected to port B406D332-75F6-4778-AB7C-C4A3FE463409 (Friendly Name: 2777fd23-a38b-46a0-bb05-1d1a4cb56cc2) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083486Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31641256n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3016323780-1152275419-3035382203-384395982211/23/2021 2:51:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B3C972C4-53DB-44AE-BB41-ECB40E2C1EE5--F9170972-31E8-4FAB-8FB1-C7C9BB59EED2 (Friendly Name: ).2330400-92233720368547758083485Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31641256n-h1-714676-12.cbci-714676-12.local11/23/2021 2:51:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403484Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 2:51:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403483Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 2:51:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Disk 1 has been surprise removed.1573277230360287970189639683482DiskSystemn-h1-714676-12.cbci-714676-12.local11/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--0D067617-5092-48D4-BC50-EC1FC4A38324 (Friendly Name: e70f289a-7426-42fd-bf4c-ebfadad815ee).2330400-92233720368547758083481Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--0D067617-5092-48D4-BC50-EC1FC4A38324 successfully disconnected from port .2340400-92233720368547758083480Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--5D539A01-4DFB-46DD-85AC-93938AB9B292 (Friendly Name: f7a19149-f6b3-45ae-abdd-4bd9ea1e0235).2330400-92233720368547758083479Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--5D539A01-4DFB-46DD-85AC-93938AB9B292 successfully disconnected from port .2340400-92233720368547758083478Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--8022E912-6C5F-40DC-80B5-BBD0C6C73E8F (Friendly Name: f2654b84-4ace-458c-8c0e-011a0ef65a78).2330400-92233720368547758083477Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--8022E912-6C5F-40DC-80B5-BBD0C6C73E8F successfully disconnected from port .2340400-92233720368547758083476Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--F4EC76FF-0D82-44AD-8012-D68C0BEB25D9 (Friendly Name: f4b9910a-7002-4170-bec7-59f53c355959).2330400-92233720368547758083475Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--F4EC76FF-0D82-44AD-8012-D68C0BEB25D9 successfully disconnected from port .2340400-92233720368547758083474Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--6D7D47A6-64BF-46FC-B11A-6072995E2A18 (Friendly Name: 51aa321a-8844-4706-ab6c-5fe8d8748083).2330400-92233720368547758083473Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--6D7D47A6-64BF-46FC-B11A-6072995E2A18 successfully disconnected from port .2340400-92233720368547758083472Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--C72EFA21-8C77-4E15-B654-659FFCBA407F (Friendly Name: dbfe04d3-63e8-4600-b1a3-1105b0a733bd).2330400-92233720368547758083471Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--C72EFA21-8C77-4E15-B654-659FFCBA407F successfully disconnected from port .2340400-92233720368547758083470Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--F60D9CA7-65F3-4CCC-885B-4CE4D12AEA70 (Friendly Name: 30cbfaa1-e6e7-44a8-867e-a8520f176bd6).2330400-92233720368547758083469Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--F60D9CA7-65F3-4CCC-885B-4CE4D12AEA70 successfully disconnected from port .2340400-92233720368547758083468Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24404464n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:50:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic DD614C97-3012-47D0-A705-C9956CF61F79--6165696C-4D0D-4AD8-B639-1182914C165E (Friendly Name: 2d2cebf3-4230-4c60-bac2-b4c43d7775f8).2330400-92233720368547758083467Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35683892n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3714141335-1204826130-2512979367-203213783611/23/2021 2:50:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DD614C97-3012-47D0-A705-C9956CF61F79--6165696C-4D0D-4AD8-B639-1182914C165E successfully disconnected from port .2340400-92233720368547758083466Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35683892n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3714141335-1204826130-2512979367-203213783611/23/2021 2:50:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DD614C97-3012-47D0-A705-C9956CF61F79--6165696C-4D0D-4AD8-B639-1182914C165E (Friendly Name: 2d2cebf3-4230-4c60-bac2-b4c43d7775f8) successfully connected to port B540CF5C-5AE9-49B5-960B-F8355A2FAECF (Friendly Name: 2d2cebf3-4230-4c60-bac2-b4c43d7775f8) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083465Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35685048n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3714141335-1204826130-2512979367-203213783611/23/2021 2:50:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic DD614C97-3012-47D0-A705-C9956CF61F79--6165696C-4D0D-4AD8-B639-1182914C165E (Friendly Name: ).2330400-92233720368547758083464Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35685048n-h1-714676-12.cbci-714676-12.local11/23/2021 2:50:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403463Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:50:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DB6C334A-99BD-46F9-B6D9-C047F45274FE--F3D1E962-585B-4F35-A557-316B336F7541 (Friendly Name: 943a075f-5c36-407b-9315-805c83ed2e5c) successfully connected to port 74C1BD40-2F6B-43F3-8DA9-7CC0702AA268 (Friendly Name: 943a075f-5c36-407b-9315-805c83ed2e5c) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083462Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47202504n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3681301322-1190762941-1203820982-426903627611/23/2021 2:49:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic DB6C334A-99BD-46F9-B6D9-C047F45274FE--F3D1E962-585B-4F35-A557-316B336F7541 (Friendly Name: ).2330400-92233720368547758083461Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47202504n-h1-714676-12.cbci-714676-12.local11/23/2021 2:49:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403460Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:49:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403459Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:47:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403458Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:47:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403457Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:47:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403456Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:46:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403455Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:46:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403454Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:45:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AF5EAFCD-E0DA-434F-8CDD-132AB9DFAC99--C4BD5A58-B4E2-4D50-9933-C700FA792A54 (Friendly Name: 35997529-5dd4-467a-929c-f0b54150ca3c).2330400-92233720368547758083453Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36682572n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2942218189-1129308378-705944972-257824351311/23/2021 2:45:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AF5EAFCD-E0DA-434F-8CDD-132AB9DFAC99--C4BD5A58-B4E2-4D50-9933-C700FA792A54 successfully disconnected from port .2340400-92233720368547758083452Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36682572n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2942218189-1129308378-705944972-257824351311/23/2021 2:45:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AF5EAFCD-E0DA-434F-8CDD-132AB9DFAC99--C4BD5A58-B4E2-4D50-9933-C700FA792A54 (Friendly Name: 35997529-5dd4-467a-929c-f0b54150ca3c) successfully connected to port 96F4236D-56B8-4BBE-947D-FA6DAE501E44 (Friendly Name: 35997529-5dd4-467a-929c-f0b54150ca3c) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083451Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36682572n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2942218189-1129308378-705944972-257824351311/23/2021 2:45:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AF5EAFCD-E0DA-434F-8CDD-132AB9DFAC99--C4BD5A58-B4E2-4D50-9933-C700FA792A54 (Friendly Name: ).2330400-92233720368547758083450Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36682572n-h1-714676-12.cbci-714676-12.local11/23/2021 2:45:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403449Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.local11/23/2021 2:45:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403448Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:45:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403447Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:44:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1C2A655A-8FA6-4BF2-80B9-F7C992C3C2C1--E4238D19-530C-4949-A435-06C7AB8675A1 (Friendly Name: 0729b34a-045e-4bc1-911a-0a8947bbc46c).2330400-92233720368547758083446Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46883672n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-472540506-1274187686-3388455296-325076673811/23/2021 2:44:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1C2A655A-8FA6-4BF2-80B9-F7C992C3C2C1--E4238D19-530C-4949-A435-06C7AB8675A1 successfully disconnected from port .2340400-92233720368547758083445Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46883672n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-472540506-1274187686-3388455296-325076673811/23/2021 2:44:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403444Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:44:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1C2A655A-8FA6-4BF2-80B9-F7C992C3C2C1--E4238D19-530C-4949-A435-06C7AB8675A1 (Friendly Name: 0729b34a-045e-4bc1-911a-0a8947bbc46c) successfully connected to port AACCC2FF-D956-499C-90E6-9ABF1560FBB0 (Friendly Name: 0729b34a-045e-4bc1-911a-0a8947bbc46c) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083443Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46881496n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-472540506-1274187686-3388455296-325076673811/23/2021 2:44:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1C2A655A-8FA6-4BF2-80B9-F7C992C3C2C1--E4238D19-530C-4949-A435-06C7AB8675A1 (Friendly Name: ).2330400-92233720368547758083442Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46881496n-h1-714676-12.cbci-714676-12.local11/23/2021 2:44:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1C2A655A-8FA6-4BF2-80B9-F7C992C3C2C1--E4238D19-530C-4949-A435-06C7AB8675A1 (Friendly Name: 0729b34a-045e-4bc1-911a-0a8947bbc46c).2330400-92233720368547758083441Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35922492n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-472540506-1274187686-3388455296-325076673811/23/2021 2:43:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1C2A655A-8FA6-4BF2-80B9-F7C992C3C2C1--E4238D19-530C-4949-A435-06C7AB8675A1 successfully disconnected from port .2340400-92233720368547758083440Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35922492n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-472540506-1274187686-3388455296-325076673811/23/2021 2:43:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1C2A655A-8FA6-4BF2-80B9-F7C992C3C2C1--E4238D19-530C-4949-A435-06C7AB8675A1 (Friendly Name: 0729b34a-045e-4bc1-911a-0a8947bbc46c) successfully connected to port AACCC2FF-D956-499C-90E6-9ABF1560FBB0 (Friendly Name: 0729b34a-045e-4bc1-911a-0a8947bbc46c) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083439Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35922492n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-472540506-1274187686-3388455296-325076673811/23/2021 2:43:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1C2A655A-8FA6-4BF2-80B9-F7C992C3C2C1--E4238D19-530C-4949-A435-06C7AB8675A1 (Friendly Name: ).2330400-92233720368547758083438Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35922492n-h1-714676-12.cbci-714676-12.local11/23/2021 2:43:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1C2A655A-8FA6-4BF2-80B9-F7C992C3C2C1--E4238D19-530C-4949-A435-06C7AB8675A1 (Friendly Name: 0729b34a-045e-4bc1-911a-0a8947bbc46c).2330400-92233720368547758083437Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39603964n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-472540506-1274187686-3388455296-325076673811/23/2021 2:43:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1C2A655A-8FA6-4BF2-80B9-F7C992C3C2C1--E4238D19-530C-4949-A435-06C7AB8675A1 successfully disconnected from port .2340400-92233720368547758083436Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39603964n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-472540506-1274187686-3388455296-325076673811/23/2021 2:43:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1C2A655A-8FA6-4BF2-80B9-F7C992C3C2C1--E4238D19-530C-4949-A435-06C7AB8675A1 (Friendly Name: 0729b34a-045e-4bc1-911a-0a8947bbc46c) successfully connected to port AACCC2FF-D956-499C-90E6-9ABF1560FBB0 (Friendly Name: 0729b34a-045e-4bc1-911a-0a8947bbc46c) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083435Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39604664n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-472540506-1274187686-3388455296-325076673811/23/2021 2:43:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1C2A655A-8FA6-4BF2-80B9-F7C992C3C2C1--E4238D19-530C-4949-A435-06C7AB8675A1 (Friendly Name: ).2330400-92233720368547758083434Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39604664n-h1-714676-12.cbci-714676-12.local11/23/2021 2:43:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--F60D9CA7-65F3-4CCC-885B-4CE4D12AEA70 (Friendly Name: 30cbfaa1-e6e7-44a8-867e-a8520f176bd6) successfully connected to port 5A22DC59-2FD5-4D27-B3CA-791680D5F10C (Friendly Name: 30cbfaa1-e6e7-44a8-867e-a8520f176bd6) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083433Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--F60D9CA7-65F3-4CCC-885B-4CE4D12AEA70 (Friendly Name: ).2330400-92233720368547758083432Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.local11/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--C72EFA21-8C77-4E15-B654-659FFCBA407F (Friendly Name: dbfe04d3-63e8-4600-b1a3-1105b0a733bd) successfully connected to port CE71123A-1A9A-4AB6-B3EF-1E97DD781485 (Friendly Name: dbfe04d3-63e8-4600-b1a3-1105b0a733bd) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083431Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--C72EFA21-8C77-4E15-B654-659FFCBA407F (Friendly Name: ).2330400-92233720368547758083430Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.local11/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--6D7D47A6-64BF-46FC-B11A-6072995E2A18 (Friendly Name: 51aa321a-8844-4706-ab6c-5fe8d8748083) successfully connected to port 3E897E9E-583A-4767-8AE0-CDCD491FD703 (Friendly Name: 51aa321a-8844-4706-ab6c-5fe8d8748083) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083429Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--6D7D47A6-64BF-46FC-B11A-6072995E2A18 (Friendly Name: ).2330400-92233720368547758083428Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.local11/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--F4EC76FF-0D82-44AD-8012-D68C0BEB25D9 (Friendly Name: f4b9910a-7002-4170-bec7-59f53c355959) successfully connected to port C3AC314A-0EDF-40A0-9355-8435CCBAEE20 (Friendly Name: f4b9910a-7002-4170-bec7-59f53c355959) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083427Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--F4EC76FF-0D82-44AD-8012-D68C0BEB25D9 (Friendly Name: ).2330400-92233720368547758083426Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.local11/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--8022E912-6C5F-40DC-80B5-BBD0C6C73E8F (Friendly Name: f2654b84-4ace-458c-8c0e-011a0ef65a78) successfully connected to port 40A84B1D-4686-4447-8600-F2187FCD5331 (Friendly Name: f2654b84-4ace-458c-8c0e-011a0ef65a78) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083425Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--8022E912-6C5F-40DC-80B5-BBD0C6C73E8F (Friendly Name: ).2330400-92233720368547758083424Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.local11/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--5D539A01-4DFB-46DD-85AC-93938AB9B292 (Friendly Name: f7a19149-f6b3-45ae-abdd-4bd9ea1e0235) successfully connected to port A4755CB4-AE05-4EA8-9447-179DB9F7BDD2 (Friendly Name: f7a19149-f6b3-45ae-abdd-4bd9ea1e0235) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083423Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--5D539A01-4DFB-46DD-85AC-93938AB9B292 (Friendly Name: ).2330400-92233720368547758083422Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.local11/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--0D067617-5092-48D4-BC50-EC1FC4A38324 (Friendly Name: e70f289a-7426-42fd-bf4c-ebfadad815ee) successfully connected to port 7989F74E-FAA9-4197-AED5-73C7461BDACE (Friendly Name: e70f289a-7426-42fd-bf4c-ebfadad815ee) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083421Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2124927195-1221002196-2864818318-243520882911/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7EA7D0DB-03D4-48C7-8EA8-C1AA7D562691--0D067617-5092-48D4-BC50-EC1FC4A38324 (Friendly Name: ).2330400-92233720368547758083420Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24403616n-h1-714676-12.cbci-714676-12.local11/23/2021 2:42:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403419Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800548n-h1-714676-12.cbci-714676-12.local11/23/2021 2:42:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the running state.7036016384400-91873432398358118403418Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800548n-h1-714676-12.cbci-714676-12.local11/23/2021 2:42:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403417Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.local11/23/2021 2:42:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C88647FB-ACBA-41C9-8A05-59953061363B--2ABBE9A3-AD48-462D-9B92-D0735C8D39A3 (Friendly Name: 8aeb7797-4e3d-48bc-80cc-3b2ca0317e14).2330400-92233720368547758083416Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47124776n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3364243451-1103735994-2505639306-99341956811/23/2021 2:42:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C88647FB-ACBA-41C9-8A05-59953061363B--2ABBE9A3-AD48-462D-9B92-D0735C8D39A3 successfully disconnected from port .2340400-92233720368547758083415Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47124776n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3364243451-1103735994-2505639306-99341956811/23/2021 2:42:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403414Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:41:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C88647FB-ACBA-41C9-8A05-59953061363B--2ABBE9A3-AD48-462D-9B92-D0735C8D39A3 (Friendly Name: 8aeb7797-4e3d-48bc-80cc-3b2ca0317e14) successfully connected to port D67DB4AF-FB59-4A55-8135-8076C9589433 (Friendly Name: 8aeb7797-4e3d-48bc-80cc-3b2ca0317e14) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083413Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47121904n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3364243451-1103735994-2505639306-99341956811/23/2021 2:39:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C88647FB-ACBA-41C9-8A05-59953061363B--2ABBE9A3-AD48-462D-9B92-D0735C8D39A3 (Friendly Name: ).2330400-92233720368547758083412Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47121904n-h1-714676-12.cbci-714676-12.local11/23/2021 2:39:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403411Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 2:39:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403410Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 2:39:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403409Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 2:38:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A25736FD-11FA-4B6F-86EF-26F9D308B6A5--FBDC9315-9112-4F61-8D66-BAF29C947537 (Friendly Name: 3abe627a-bf31-402a-8fcc-9921feaf2b6c).2330400-92233720368547758083408Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47444676n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2723624701-1265570298-4180078470-278017045111/23/2021 2:38:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A25736FD-11FA-4B6F-86EF-26F9D308B6A5--FBDC9315-9112-4F61-8D66-BAF29C947537 successfully disconnected from port .2340400-92233720368547758083407Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47444676n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2723624701-1265570298-4180078470-278017045111/23/2021 2:38:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 64BD4C4C-4486-4581-8E0F-280ECBF28B55--2A0125DC-A2E9-4D33-9571-A11128506578 (Friendly Name: 4d3c259b-f487-47d8-8f62-d72cb8495238).2330400-92233720368547758083406Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36522484n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1690127436-1166099590-237506446-143523501911/23/2021 2:38:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 64BD4C4C-4486-4581-8E0F-280ECBF28B55--2A0125DC-A2E9-4D33-9571-A11128506578 successfully disconnected from port .2340400-92233720368547758083405Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36522484n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1690127436-1166099590-237506446-143523501911/23/2021 2:38:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 64BD4C4C-4486-4581-8E0F-280ECBF28B55--2A0125DC-A2E9-4D33-9571-A11128506578 (Friendly Name: 4d3c259b-f487-47d8-8f62-d72cb8495238) successfully connected to port B9A8FE1D-7E19-4C63-8105-DFC0F1A66EAA (Friendly Name: 4d3c259b-f487-47d8-8f62-d72cb8495238) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083404Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36521360n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1690127436-1166099590-237506446-143523501911/23/2021 2:38:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 64BD4C4C-4486-4581-8E0F-280ECBF28B55--2A0125DC-A2E9-4D33-9571-A11128506578 (Friendly Name: ).2330400-92233720368547758083403Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36521360n-h1-714676-12.cbci-714676-12.local11/23/2021 2:38:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6085CCA3-1DD5-4CAC-A399-78ED49CD99ED--FA5694AB-9D9C-4309-916C-9330BBD4CED3 (Friendly Name: 81239869-a38b-4bdb-b187-978b9f1b58f0).2330400-92233720368547758083402Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25604780n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1619381411-1286348245-3984103843-398627975311/23/2021 2:37:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6085CCA3-1DD5-4CAC-A399-78ED49CD99ED--FA5694AB-9D9C-4309-916C-9330BBD4CED3 successfully disconnected from port .2340400-92233720368547758083401Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25604780n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1619381411-1286348245-3984103843-398627975311/23/2021 2:37:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6085CCA3-1DD5-4CAC-A399-78ED49CD99ED--FA5694AB-9D9C-4309-916C-9330BBD4CED3 (Friendly Name: 81239869-a38b-4bdb-b187-978b9f1b58f0) successfully connected to port EB5E2A77-613C-4867-8CB2-3508E7853E1B (Friendly Name: 81239869-a38b-4bdb-b187-978b9f1b58f0) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083400Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25602564n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1619381411-1286348245-3984103843-398627975311/23/2021 2:37:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6085CCA3-1DD5-4CAC-A399-78ED49CD99ED--FA5694AB-9D9C-4309-916C-9330BBD4CED3 (Friendly Name: ).2330400-92233720368547758083399Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25602564n-h1-714676-12.cbci-714676-12.local11/23/2021 2:37:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic DA9F0A3A-82C4-4502-9F0D-1A9700BA954C--79CE10BD-F33B-4CCD-B576-73EDF78E72A8 (Friendly Name: ec105338-8177-462f-8826-50321ed17aa9).2330400-92233720368547758083398Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4924596n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3667855930-1157792452-2535067039-128488089611/23/2021 2:37:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DA9F0A3A-82C4-4502-9F0D-1A9700BA954C--79CE10BD-F33B-4CCD-B576-73EDF78E72A8 successfully disconnected from port .2340400-92233720368547758083397Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4924596n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3667855930-1157792452-2535067039-128488089611/23/2021 2:37:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5520E9B4-0425-4484-A447-16FCEA964E98--2B73F554-BACC-413A-A1B4-94B7F2FFFAF4 (Friendly Name: 291ce611-960f-4683-a085-1df6daadb27f).2330400-92233720368547758083396Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51044308n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1428220340-1149502501-4229318564-255528727411/23/2021 2:37:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5520E9B4-0425-4484-A447-16FCEA964E98--2B73F554-BACC-413A-A1B4-94B7F2FFFAF4 successfully disconnected from port .2340400-92233720368547758083395Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51044308n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1428220340-1149502501-4229318564-255528727411/23/2021 2:37:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5520E9B4-0425-4484-A447-16FCEA964E98--2B73F554-BACC-413A-A1B4-94B7F2FFFAF4 (Friendly Name: 291ce611-960f-4683-a085-1df6daadb27f) successfully connected to port 3F146E8F-C4D0-408D-909D-64C8EEE55D83 (Friendly Name: 291ce611-960f-4683-a085-1df6daadb27f) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083394Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5104936n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1428220340-1149502501-4229318564-255528727411/23/2021 2:37:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5520E9B4-0425-4484-A447-16FCEA964E98--2B73F554-BACC-413A-A1B4-94B7F2FFFAF4 (Friendly Name: ).2330400-92233720368547758083393Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5104936n-h1-714676-12.cbci-714676-12.local11/23/2021 2:37:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DA9F0A3A-82C4-4502-9F0D-1A9700BA954C--79CE10BD-F33B-4CCD-B576-73EDF78E72A8 (Friendly Name: ec105338-8177-462f-8826-50321ed17aa9) successfully connected to port 1A8D38C9-0252-474A-A690-35E63328742B (Friendly Name: ec105338-8177-462f-8826-50321ed17aa9) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083392Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4924596n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3667855930-1157792452-2535067039-128488089611/23/2021 2:37:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic DA9F0A3A-82C4-4502-9F0D-1A9700BA954C--79CE10BD-F33B-4CCD-B576-73EDF78E72A8 (Friendly Name: ).2330400-92233720368547758083391Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4924596n-h1-714676-12.cbci-714676-12.local11/23/2021 2:37:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0C9CFF8C-A6FE-4469-911E-2F4F83A9BC99--D399AC31-D45F-41A8-A96D-D833110E26A1 (Friendly Name: 81b7b087-6c58-4161-927c-983532f353e3).2330400-92233720368547758083390Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33124660n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-211615628-1147774718-1328488081-257927821111/23/2021 2:37:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0C9CFF8C-A6FE-4469-911E-2F4F83A9BC99--D399AC31-D45F-41A8-A96D-D833110E26A1 successfully disconnected from port .2340400-92233720368547758083389Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33124660n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-211615628-1147774718-1328488081-257927821111/23/2021 2:37:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 4A135910-8609-4E92-A4A4-041E8E3EB3F7--4D56ACC7-9330-4481-87C3-8C4C5CD7A1E3 (Friendly Name: b5a32879-cf44-4be4-91af-d023690203ed).2330400-92233720368547758083388Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23203672n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1242781968-1318225417-503620772-415571931011/23/2021 2:37:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4A135910-8609-4E92-A4A4-041E8E3EB3F7--4D56ACC7-9330-4481-87C3-8C4C5CD7A1E3 successfully disconnected from port .2340400-92233720368547758083387Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23203672n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1242781968-1318225417-503620772-415571931011/23/2021 2:37:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 94AE7F6B-DF1A-4FFE-B732-3457619D655A--6107F43A-4831-4731-BBB0-45875A1CE416 (Friendly Name: 82339318-3e3a-459b-900a-02ae216d1beb).2330400-92233720368547758083386Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4280172n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2494463851-1342103322-1463038647-151660886511/23/2021 2:37:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 94AE7F6B-DF1A-4FFE-B732-3457619D655A--6107F43A-4831-4731-BBB0-45875A1CE416 successfully disconnected from port .2340400-92233720368547758083385Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4280172n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2494463851-1342103322-1463038647-151660886511/23/2021 2:37:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4A135910-8609-4E92-A4A4-041E8E3EB3F7--4D56ACC7-9330-4481-87C3-8C4C5CD7A1E3 (Friendly Name: b5a32879-cf44-4be4-91af-d023690203ed) successfully connected to port C05FDFAB-8B33-48B2-84AD-1C1176766F78 (Friendly Name: b5a32879-cf44-4be4-91af-d023690203ed) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083384Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23201496n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1242781968-1318225417-503620772-415571931011/23/2021 2:37:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 4A135910-8609-4E92-A4A4-041E8E3EB3F7--4D56ACC7-9330-4481-87C3-8C4C5CD7A1E3 (Friendly Name: ).2330400-92233720368547758083383Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23201496n-h1-714676-12.cbci-714676-12.local11/23/2021 2:37:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0C9CFF8C-A6FE-4469-911E-2F4F83A9BC99--D399AC31-D45F-41A8-A96D-D833110E26A1 (Friendly Name: 81b7b087-6c58-4161-927c-983532f353e3) successfully connected to port F70E42FD-DDE3-4719-AC30-EBEE3BD01016 (Friendly Name: 81b7b087-6c58-4161-927c-983532f353e3) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083382Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33121552n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-211615628-1147774718-1328488081-257927821111/23/2021 2:36:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0C9CFF8C-A6FE-4469-911E-2F4F83A9BC99--D399AC31-D45F-41A8-A96D-D833110E26A1 (Friendly Name: ).2330400-92233720368547758083381Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33121552n-h1-714676-12.cbci-714676-12.local11/23/2021 2:36:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 94AE7F6B-DF1A-4FFE-B732-3457619D655A--6107F43A-4831-4731-BBB0-45875A1CE416 (Friendly Name: 82339318-3e3a-459b-900a-02ae216d1beb) successfully connected to port 1677B913-B933-444F-BA5D-87051F0E46BE (Friendly Name: 82339318-3e3a-459b-900a-02ae216d1beb) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083380Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4280172n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2494463851-1342103322-1463038647-151660886511/23/2021 2:36:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 94AE7F6B-DF1A-4FFE-B732-3457619D655A--6107F43A-4831-4731-BBB0-45875A1CE416 (Friendly Name: ).2330400-92233720368547758083379Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4280172n-h1-714676-12.cbci-714676-12.local11/23/2021 2:36:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403378Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.local11/23/2021 2:36:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0736D15C-B661-455D-B618-76094D137814--88B95593-F6DB-49A2-884A-A9269CB0066D (Friendly Name: 122e17b6-9a11-4fdb-a4bd-25aaffe0b67d).2330400-92233720368547758083377Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2372808n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-121033052-1163769441-158734518-34341358111/23/2021 2:36:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0736D15C-B661-455D-B618-76094D137814--88B95593-F6DB-49A2-884A-A9269CB0066D successfully disconnected from port .2340400-92233720368547758083376Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2372808n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-121033052-1163769441-158734518-34341358111/23/2021 2:36:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0736D15C-B661-455D-B618-76094D137814--88B95593-F6DB-49A2-884A-A9269CB0066D (Friendly Name: 122e17b6-9a11-4fdb-a4bd-25aaffe0b67d) successfully connected to port 32EA6386-A724-4E4D-8D6C-F634F6FC931A (Friendly Name: 122e17b6-9a11-4fdb-a4bd-25aaffe0b67d) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083375Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23723076n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-121033052-1163769441-158734518-34341358111/23/2021 2:36:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0736D15C-B661-455D-B618-76094D137814--88B95593-F6DB-49A2-884A-A9269CB0066D (Friendly Name: ).2330400-92233720368547758083374Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23723076n-h1-714676-12.cbci-714676-12.local11/23/2021 2:36:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A25736FD-11FA-4B6F-86EF-26F9D308B6A5--FBDC9315-9112-4F61-8D66-BAF29C947537 (Friendly Name: 3abe627a-bf31-402a-8fcc-9921feaf2b6c) successfully connected to port 0E353926-332C-4F7E-A037-838F8A5595BB (Friendly Name: 3abe627a-bf31-402a-8fcc-9921feaf2b6c) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083373Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47444676n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2723624701-1265570298-4180078470-278017045111/23/2021 2:36:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A25736FD-11FA-4B6F-86EF-26F9D308B6A5--FBDC9315-9112-4F61-8D66-BAF29C947537 (Friendly Name: ).2330400-92233720368547758083372Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47444676n-h1-714676-12.cbci-714676-12.local11/23/2021 2:36:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AC858D17-5094-4A4A-8137-499EFAA67DAD--262E70D0-B31F-490F-AB30-721FB18D7F52 (Friendly Name: e55a30fd-56c0-4d90-82eb-e8ad19c35288).2330400-92233720368547758083371Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32364452n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2894433559-1246384276-2655598465-291069311411/23/2021 2:35:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AC858D17-5094-4A4A-8137-499EFAA67DAD--262E70D0-B31F-490F-AB30-721FB18D7F52 successfully disconnected from port .2340400-92233720368547758083370Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32364452n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2894433559-1246384276-2655598465-291069311411/23/2021 2:35:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AC858D17-5094-4A4A-8137-499EFAA67DAD--262E70D0-B31F-490F-AB30-721FB18D7F52 (Friendly Name: e55a30fd-56c0-4d90-82eb-e8ad19c35288) successfully connected to port FBD5CF1C-EBA1-44AF-8FD7-71D75D821808 (Friendly Name: e55a30fd-56c0-4d90-82eb-e8ad19c35288) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083369Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32361904n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2894433559-1246384276-2655598465-291069311411/23/2021 2:35:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AC858D17-5094-4A4A-8137-499EFAA67DAD--262E70D0-B31F-490F-AB30-721FB18D7F52 (Friendly Name: ).2330400-92233720368547758083368Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32361904n-h1-714676-12.cbci-714676-12.local11/23/2021 2:35:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 57990E32-348C-4CA8-8A08-B831396A7716--F8755A85-EED4-46C4-985A-E2D6D8DADA1D (Friendly Name: 1954ae2a-162d-43de-a433-b4b420c01922).2330400-92233720368547758083367Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49284064n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1469648434-1286091916-834144394-37692472911/23/2021 2:35:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 57990E32-348C-4CA8-8A08-B831396A7716--F8755A85-EED4-46C4-985A-E2D6D8DADA1D successfully disconnected from port .2340400-92233720368547758083366Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49284064n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1469648434-1286091916-834144394-37692472911/23/2021 2:35:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D50EE39E-6587-42F5-8153-FE1CB2A67CDD--0EC6AB59-23F4-45D0-A663-2C435B198E80 (Friendly Name: 65b2bfb1-4dcd-4d73-811d-764f65d24b8b).2330400-92233720368547758083365Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31643208n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3574522782-1123378567-486429569-371593387411/23/2021 2:34:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D50EE39E-6587-42F5-8153-FE1CB2A67CDD--0EC6AB59-23F4-45D0-A663-2C435B198E80 successfully disconnected from port .2340400-92233720368547758083364Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31643208n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3574522782-1123378567-486429569-371593387411/23/2021 2:34:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic FA662481-8500-483B-8BD9-0D6678AE5B6C--A702FB76-00D9-443D-AF76-4D390C914D44 (Friendly Name: 413eb475-41cb-4777-9daf-029b4e63056a).2330400-92233720368547758083363Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43764740n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4200998017-1211860224-1712183691-181794776811/23/2021 2:34:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FA662481-8500-483B-8BD9-0D6678AE5B6C--A702FB76-00D9-443D-AF76-4D390C914D44 successfully disconnected from port .2340400-92233720368547758083362Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43764740n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4200998017-1211860224-1712183691-181794776811/23/2021 2:34:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 8D18FB3F-1A48-43EF-A0EB-A905513A9519--9EBF0B71-4ABE-40A0-ABB9-9E3770BDB1E0 (Friendly Name: 171c01d1-2123-43ef-8e58-189586b2c323).2330400-92233720368547758083361Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46883040n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2367224639-1139743304-95021984-42921019311/23/2021 2:33:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8D18FB3F-1A48-43EF-A0EB-A905513A9519--9EBF0B71-4ABE-40A0-ABB9-9E3770BDB1E0 successfully disconnected from port .2340400-92233720368547758083360Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46883040n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2367224639-1139743304-95021984-42921019311/23/2021 2:33:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 57990E32-348C-4CA8-8A08-B831396A7716--F8755A85-EED4-46C4-985A-E2D6D8DADA1D (Friendly Name: 1954ae2a-162d-43de-a433-b4b420c01922) successfully connected to port C4441391-DC28-450C-A426-FD14F870EF4F (Friendly Name: 1954ae2a-162d-43de-a433-b4b420c01922) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083359Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49284076n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1469648434-1286091916-834144394-37692472911/23/2021 2:33:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 57990E32-348C-4CA8-8A08-B831396A7716--F8755A85-EED4-46C4-985A-E2D6D8DADA1D (Friendly Name: ).2330400-92233720368547758083358Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49284076n-h1-714676-12.cbci-714676-12.local11/23/2021 2:33:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FA662481-8500-483B-8BD9-0D6678AE5B6C--A702FB76-00D9-443D-AF76-4D390C914D44 (Friendly Name: 413eb475-41cb-4777-9daf-029b4e63056a) successfully connected to port A646874B-A381-4495-BD6B-C73206E05002 (Friendly Name: 413eb475-41cb-4777-9daf-029b4e63056a) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083357Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43764740n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4200998017-1211860224-1712183691-181794776811/23/2021 2:33:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic FA662481-8500-483B-8BD9-0D6678AE5B6C--A702FB76-00D9-443D-AF76-4D390C914D44 (Friendly Name: ).2330400-92233720368547758083356Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43764740n-h1-714676-12.cbci-714676-12.local11/23/2021 2:33:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D50EE39E-6587-42F5-8153-FE1CB2A67CDD--0EC6AB59-23F4-45D0-A663-2C435B198E80 (Friendly Name: 65b2bfb1-4dcd-4d73-811d-764f65d24b8b) successfully connected to port AD4CA378-41A9-48BE-8A9A-992A47D50514 (Friendly Name: 65b2bfb1-4dcd-4d73-811d-764f65d24b8b) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083355Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3164676n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3574522782-1123378567-486429569-371593387411/23/2021 2:33:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D50EE39E-6587-42F5-8153-FE1CB2A67CDD--0EC6AB59-23F4-45D0-A663-2C435B198E80 (Friendly Name: ).2330400-92233720368547758083354Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3164676n-h1-714676-12.cbci-714676-12.local11/23/2021 2:33:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118403353Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800548n-h1-714676-12.cbci-714676-12.local11/23/2021 2:32:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7E3267D1-7331-431D-A062-B0D2F56D15BF--6956C12C-03C5-4836-8890-37D11FC8F344 (Friendly Name: ba1c13c3-5b19-4511-9547-1455bb947077).2330400-92233720368547758083352Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48322804n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2117232593-1126003505-3534774944-320585266111/23/2021 2:32:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7E3267D1-7331-431D-A062-B0D2F56D15BF--6956C12C-03C5-4836-8890-37D11FC8F344 successfully disconnected from port .2340400-92233720368547758083351Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48322804n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2117232593-1126003505-3534774944-320585266111/23/2021 2:32:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7E3267D1-7331-431D-A062-B0D2F56D15BF--6956C12C-03C5-4836-8890-37D11FC8F344 (Friendly Name: ba1c13c3-5b19-4511-9547-1455bb947077) successfully connected to port 1B47AA90-939F-4372-9A87-D8C078ED0844 (Friendly Name: ba1c13c3-5b19-4511-9547-1455bb947077) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083350Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48323980n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2117232593-1126003505-3534774944-320585266111/23/2021 2:32:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7E3267D1-7331-431D-A062-B0D2F56D15BF--6956C12C-03C5-4836-8890-37D11FC8F344 (Friendly Name: ).2330400-92233720368547758083349Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48323980n-h1-714676-12.cbci-714676-12.local11/23/2021 2:32:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403348Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800548n-h1-714676-12.cbci-714676-12.local11/23/2021 2:32:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403347Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800548n-h1-714676-12.cbci-714676-12.local11/23/2021 2:31:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3540A3FC-8764-4635-9447-81094B4FDD13--53C7F4CF-A858-48CD-BBD0-8298FF98C2D7 (Friendly Name: c6ab4397-baea-4c94-99dc-08a5a4660571).2330400-92233720368547758083346Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48442808n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-893428732-1177913188-159467412-33327085911/23/2021 2:31:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3540A3FC-8764-4635-9447-81094B4FDD13--53C7F4CF-A858-48CD-BBD0-8298FF98C2D7 successfully disconnected from port .2340400-92233720368547758083345Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48442808n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-893428732-1177913188-159467412-33327085911/23/2021 2:31:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3540A3FC-8764-4635-9447-81094B4FDD13--53C7F4CF-A858-48CD-BBD0-8298FF98C2D7 (Friendly Name: c6ab4397-baea-4c94-99dc-08a5a4660571) successfully connected to port 6319B81C-C24A-403F-9CA5-6A16F9E8E0D5 (Friendly Name: c6ab4397-baea-4c94-99dc-08a5a4660571) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083344Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48443140n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-893428732-1177913188-159467412-33327085911/23/2021 2:31:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3540A3FC-8764-4635-9447-81094B4FDD13--53C7F4CF-A858-48CD-BBD0-8298FF98C2D7 (Friendly Name: ).2330400-92233720368547758083343Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48443140n-h1-714676-12.cbci-714676-12.local11/23/2021 2:31:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 86A5318E-D91B-4DD3-B76E-7E40C481A757--B1B19C6F-ACF2-44AE-831B-D737D410DF4E (Friendly Name: b0c0c2d2-e210-4be3-ad65-759fde5ee5c1).2330400-92233720368547758083342Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4668596n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2258973070-1305729307-1082027703-147059552411/23/2021 2:31:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 86A5318E-D91B-4DD3-B76E-7E40C481A757--B1B19C6F-ACF2-44AE-831B-D737D410DF4E successfully disconnected from port .2340400-92233720368547758083341Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4668596n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2258973070-1305729307-1082027703-147059552411/23/2021 2:31:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 86A5318E-D91B-4DD3-B76E-7E40C481A757--B1B19C6F-ACF2-44AE-831B-D737D410DF4E (Friendly Name: b0c0c2d2-e210-4be3-ad65-759fde5ee5c1) successfully connected to port D45507F5-52A2-493F-880C-1756ACA942CF (Friendly Name: b0c0c2d2-e210-4be3-ad65-759fde5ee5c1) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083340Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4668596n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2258973070-1305729307-1082027703-147059552411/23/2021 2:31:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 86A5318E-D91B-4DD3-B76E-7E40C481A757--B1B19C6F-ACF2-44AE-831B-D737D410DF4E (Friendly Name: ).2330400-92233720368547758083339Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4668596n-h1-714676-12.cbci-714676-12.local11/23/2021 2:31:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8D18FB3F-1A48-43EF-A0EB-A905513A9519--9EBF0B71-4ABE-40A0-ABB9-9E3770BDB1E0 (Friendly Name: 171c01d1-2123-43ef-8e58-189586b2c323) successfully connected to port 7EDB4991-745C-4AF7-A7E8-D9BAD29041C0 (Friendly Name: 171c01d1-2123-43ef-8e58-189586b2c323) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083338Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46883624n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2367224639-1139743304-95021984-42921019311/23/2021 2:31:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 8D18FB3F-1A48-43EF-A0EB-A905513A9519--9EBF0B71-4ABE-40A0-ABB9-9E3770BDB1E0 (Friendly Name: ).2330400-92233720368547758083337Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46883624n-h1-714676-12.cbci-714676-12.local11/23/2021 2:31:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 29C7ECC8-D921-44EC-B11B-8EC0FF2316D5--C4E8699F-D36D-4D21-A5B2-FA6771C4430E (Friendly Name: b9906092-e524-450d-8935-84ce518660fa).2330400-92233720368547758083336Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4176936n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-700968136-1156372769-3230538673-357499801511/23/2021 2:31:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 29C7ECC8-D921-44EC-B11B-8EC0FF2316D5--C4E8699F-D36D-4D21-A5B2-FA6771C4430E successfully disconnected from port .2340400-92233720368547758083335Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4176936n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-700968136-1156372769-3230538673-357499801511/23/2021 2:31:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1DFA2D0F-6C3A-4542-B406-FB2CFCDA074D--AE066D6A-D009-4788-BA1F-61865C944754 (Friendly Name: 1af30eab-e07c-4e1a-bfcd-d41f508ac0b1).2330400-92233720368547758083334Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25803204n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-502934799-1161980986-754648756-129236044411/23/2021 2:31:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1DFA2D0F-6C3A-4542-B406-FB2CFCDA074D--AE066D6A-D009-4788-BA1F-61865C944754 successfully disconnected from port .2340400-92233720368547758083333Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25803204n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-502934799-1161980986-754648756-129236044411/23/2021 2:31:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1DFA2D0F-6C3A-4542-B406-FB2CFCDA074D--AE066D6A-D009-4788-BA1F-61865C944754 (Friendly Name: 1af30eab-e07c-4e1a-bfcd-d41f508ac0b1) successfully connected to port 9DBA07BA-E6E1-4636-B4CE-1580A4E2D9B4 (Friendly Name: 1af30eab-e07c-4e1a-bfcd-d41f508ac0b1) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083332Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25803204n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-502934799-1161980986-754648756-129236044411/23/2021 2:30:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1DFA2D0F-6C3A-4542-B406-FB2CFCDA074D--AE066D6A-D009-4788-BA1F-61865C944754 (Friendly Name: ).2330400-92233720368547758083331Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25803204n-h1-714676-12.cbci-714676-12.local11/23/2021 2:30:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2E459E55-C9A6-40DC-A58A-C1B72D46D120--20E16A88-211E-40CD-BB95-5864DEB87DD0 (Friendly Name: d579dbe3-c909-4eda-aa1b-9322b40d5183).2330400-92233720368547758083330Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41524968n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-776314453-1088211366-3082914469-55058590111/23/2021 2:30:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2E459E55-C9A6-40DC-A58A-C1B72D46D120--20E16A88-211E-40CD-BB95-5864DEB87DD0 successfully disconnected from port .2340400-92233720368547758083329Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41524968n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-776314453-1088211366-3082914469-55058590111/23/2021 2:30:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 40D356DF-6DF8-4F8C-8047-EE0745B70A25--60690AD4-79DC-4220-B7BC-98172A94D260 (Friendly Name: be1516f9-48e5-4477-91de-85d22fbea069).2330400-92233720368547758083328Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44762288n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1087592159-1334603256-133056384-62145926911/23/2021 2:30:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 40D356DF-6DF8-4F8C-8047-EE0745B70A25--60690AD4-79DC-4220-B7BC-98172A94D260 successfully disconnected from port .2340400-92233720368547758083327Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44762288n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1087592159-1334603256-133056384-62145926911/23/2021 2:30:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 29C7ECC8-D921-44EC-B11B-8EC0FF2316D5--C4E8699F-D36D-4D21-A5B2-FA6771C4430E (Friendly Name: b9906092-e524-450d-8935-84ce518660fa) successfully connected to port 0273FC32-5B8F-46F6-B1CE-7161D08E48A7 (Friendly Name: b9906092-e524-450d-8935-84ce518660fa) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083326Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4176936n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-700968136-1156372769-3230538673-357499801511/23/2021 2:30:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 29C7ECC8-D921-44EC-B11B-8EC0FF2316D5--C4E8699F-D36D-4D21-A5B2-FA6771C4430E (Friendly Name: ).2330400-92233720368547758083325Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4176936n-h1-714676-12.cbci-714676-12.local11/23/2021 2:30:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 50D0E20F-AF2E-4268-A027-38D22CC34CB8--4B93E2A4-E2CC-4BF5-BDAF-EFCD964204DE (Friendly Name: 62cea407-2e3a-48d7-898a-412bd36ab2df).2330400-92233720368547758083324Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47202120n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1355866639-1114156846-3526895520-309203844411/23/2021 2:30:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 50D0E20F-AF2E-4268-A027-38D22CC34CB8--4B93E2A4-E2CC-4BF5-BDAF-EFCD964204DE successfully disconnected from port .2340400-92233720368547758083323Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47202120n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1355866639-1114156846-3526895520-309203844411/23/2021 2:30:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 40D356DF-6DF8-4F8C-8047-EE0745B70A25--60690AD4-79DC-4220-B7BC-98172A94D260 (Friendly Name: be1516f9-48e5-4477-91de-85d22fbea069) successfully connected to port 7FBF1943-6F2B-4D6C-B087-3AF1456FF5F2 (Friendly Name: be1516f9-48e5-4477-91de-85d22fbea069) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083322Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44762288n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1087592159-1334603256-133056384-62145926911/23/2021 2:30:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 40D356DF-6DF8-4F8C-8047-EE0745B70A25--60690AD4-79DC-4220-B7BC-98172A94D260 (Friendly Name: ).2330400-92233720368547758083321Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44762288n-h1-714676-12.cbci-714676-12.local11/23/2021 2:30:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 40D356DF-6DF8-4F8C-8047-EE0745B70A25--60690AD4-79DC-4220-B7BC-98172A94D260 (Friendly Name: be1516f9-48e5-4477-91de-85d22fbea069).2330400-92233720368547758083320Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10402492n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1087592159-1334603256-133056384-62145926911/23/2021 2:30:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 40D356DF-6DF8-4F8C-8047-EE0745B70A25--60690AD4-79DC-4220-B7BC-98172A94D260 successfully disconnected from port .2340400-92233720368547758083319Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10402492n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1087592159-1334603256-133056384-62145926911/23/2021 2:30:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2E459E55-C9A6-40DC-A58A-C1B72D46D120--20E16A88-211E-40CD-BB95-5864DEB87DD0 (Friendly Name: d579dbe3-c909-4eda-aa1b-9322b40d5183) successfully connected to port 2F888912-A78A-4914-93E8-666CEFC60A6F (Friendly Name: d579dbe3-c909-4eda-aa1b-9322b40d5183) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083318Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41522564n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-776314453-1088211366-3082914469-55058590111/23/2021 2:30:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2E459E55-C9A6-40DC-A58A-C1B72D46D120--20E16A88-211E-40CD-BB95-5864DEB87DD0 (Friendly Name: ).2330400-92233720368547758083317Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41522564n-h1-714676-12.cbci-714676-12.local11/23/2021 2:30:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 50D0E20F-AF2E-4268-A027-38D22CC34CB8--4B93E2A4-E2CC-4BF5-BDAF-EFCD964204DE (Friendly Name: 62cea407-2e3a-48d7-898a-412bd36ab2df) successfully connected to port 8DE4B478-0C9C-4265-BBC9-7FF6626C6C47 (Friendly Name: 62cea407-2e3a-48d7-898a-412bd36ab2df) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083316Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47202544n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1355866639-1114156846-3526895520-309203844411/23/2021 2:30:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 50D0E20F-AF2E-4268-A027-38D22CC34CB8--4B93E2A4-E2CC-4BF5-BDAF-EFCD964204DE (Friendly Name: ).2330400-92233720368547758083315Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47202544n-h1-714676-12.cbci-714676-12.local11/23/2021 2:30:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 956559A2-B2D5-4A05-89C4-7D8F420C8E67--0A039BBA-8127-479D-B9A2-3D3D91348D56 (Friendly Name: ac33a4c7-5b72-4c21-b0ba-7736df477fab).2330400-92233720368547758083314Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45882808n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2506447266-1241887445-2407384201-173736249811/23/2021 2:30:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 956559A2-B2D5-4A05-89C4-7D8F420C8E67--0A039BBA-8127-479D-B9A2-3D3D91348D56 successfully disconnected from port .2340400-92233720368547758083313Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45882808n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2506447266-1241887445-2407384201-173736249811/23/2021 2:30:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7EAA2F59-124D-4CFD-8C57-0C934D39E5CA--8D90719A-AFB5-4B9C-85C7-E9A454AB4FAF (Friendly Name: eb90c29c-046d-4a5d-8330-cad97f3b4b15).2330400-92233720368547758083312Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48842860n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2125082457-1291653709-2467059596-340402004511/23/2021 2:30:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EAA2F59-124D-4CFD-8C57-0C934D39E5CA--8D90719A-AFB5-4B9C-85C7-E9A454AB4FAF successfully disconnected from port .2340400-92233720368547758083311Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48842860n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2125082457-1291653709-2467059596-340402004511/23/2021 2:30:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D961A660-4D4D-4FAA-85C0-178019130271--7B64A49E-A5AE-4A2C-9AD1-B3B265BB4D21 (Friendly Name: 0865b7c0-ea00-4325-9503-38523c1f2093).2330400-92233720368547758083310Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5882320n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3647055456-1336560973-2149040261-189596136911/23/2021 2:30:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D961A660-4D4D-4FAA-85C0-178019130271--7B64A49E-A5AE-4A2C-9AD1-B3B265BB4D21 successfully disconnected from port .2340400-92233720368547758083309Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5882320n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3647055456-1336560973-2149040261-189596136911/23/2021 2:30:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D9A0C2E2-6EC3-4AED-8490-24DD85FFEF06--3CCC26CE-44B4-4323-99AB-C6D98BB01F4B (Friendly Name: 54c5ee39-0e4c-4df7-b961-9eb6ca0a8926).2330400-92233720368547758083308Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36723040n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3651191522-1257074371-3710161028-11639181311/23/2021 2:30:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D9A0C2E2-6EC3-4AED-8490-24DD85FFEF06--3CCC26CE-44B4-4323-99AB-C6D98BB01F4B successfully disconnected from port .2340400-92233720368547758083307Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36723040n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3651191522-1257074371-3710161028-11639181311/23/2021 2:30:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 40D356DF-6DF8-4F8C-8047-EE0745B70A25--60690AD4-79DC-4220-B7BC-98172A94D260 (Friendly Name: be1516f9-48e5-4477-91de-85d22fbea069) successfully connected to port 7FBF1943-6F2B-4D6C-B087-3AF1456FF5F2 (Friendly Name: be1516f9-48e5-4477-91de-85d22fbea069) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083306Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1040824n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1087592159-1334603256-133056384-62145926911/23/2021 2:30:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 40D356DF-6DF8-4F8C-8047-EE0745B70A25--60690AD4-79DC-4220-B7BC-98172A94D260 (Friendly Name: ).2330400-92233720368547758083305Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1040824n-h1-714676-12.cbci-714676-12.local11/23/2021 2:30:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EAA2F59-124D-4CFD-8C57-0C934D39E5CA--8D90719A-AFB5-4B9C-85C7-E9A454AB4FAF (Friendly Name: eb90c29c-046d-4a5d-8330-cad97f3b4b15) successfully connected to port A126FC97-1BB7-4BAC-A1D9-E3D8088A6ADA (Friendly Name: eb90c29c-046d-4a5d-8330-cad97f3b4b15) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083304Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48842508n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2125082457-1291653709-2467059596-340402004511/23/2021 2:29:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7EAA2F59-124D-4CFD-8C57-0C934D39E5CA--8D90719A-AFB5-4B9C-85C7-E9A454AB4FAF (Friendly Name: ).2330400-92233720368547758083303Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48842508n-h1-714676-12.cbci-714676-12.local11/23/2021 2:29:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403302Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:29:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403301Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:29:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403300Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.local11/23/2021 2:29:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 956559A2-B2D5-4A05-89C4-7D8F420C8E67--0A039BBA-8127-479D-B9A2-3D3D91348D56 (Friendly Name: ac33a4c7-5b72-4c21-b0ba-7736df477fab) successfully connected to port 4692D1E1-211E-47F8-A87A-4E735CFDD232 (Friendly Name: ac33a4c7-5b72-4c21-b0ba-7736df477fab) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083299Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45884848n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2506447266-1241887445-2407384201-173736249811/23/2021 2:29:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 956559A2-B2D5-4A05-89C4-7D8F420C8E67--0A039BBA-8127-479D-B9A2-3D3D91348D56 (Friendly Name: ).2330400-92233720368547758083298Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45884848n-h1-714676-12.cbci-714676-12.local11/23/2021 2:29:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 956559A2-B2D5-4A05-89C4-7D8F420C8E67--0A039BBA-8127-479D-B9A2-3D3D91348D56 (Friendly Name: ac33a4c7-5b72-4c21-b0ba-7736df477fab).2330400-92233720368547758083297Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4176924n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2506447266-1241887445-2407384201-173736249811/23/2021 2:29:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 956559A2-B2D5-4A05-89C4-7D8F420C8E67--0A039BBA-8127-479D-B9A2-3D3D91348D56 successfully disconnected from port .2340400-92233720368547758083296Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4176924n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2506447266-1241887445-2407384201-173736249811/23/2021 2:29:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C004F7F2-6F61-437F-A808-0B0929FC27CB--5A845151-E948-42D0-B6DC-A67A68325578 (Friendly Name: b2b06f13-bc58-439e-9f19-e0ff384c3f72).2330400-92233720368547758083295Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem16404948n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3221551090-1132425057-151718056-340839530511/23/2021 2:29:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C004F7F2-6F61-437F-A808-0B0929FC27CB--5A845151-E948-42D0-B6DC-A67A68325578 successfully disconnected from port .2340400-92233720368547758083294Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem16404948n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3221551090-1132425057-151718056-340839530511/23/2021 2:29:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 956559A2-B2D5-4A05-89C4-7D8F420C8E67--0A039BBA-8127-479D-B9A2-3D3D91348D56 (Friendly Name: ac33a4c7-5b72-4c21-b0ba-7736df477fab) successfully connected to port 4692D1E1-211E-47F8-A87A-4E735CFDD232 (Friendly Name: ac33a4c7-5b72-4c21-b0ba-7736df477fab) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083293Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4176924n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2506447266-1241887445-2407384201-173736249811/23/2021 2:29:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 956559A2-B2D5-4A05-89C4-7D8F420C8E67--0A039BBA-8127-479D-B9A2-3D3D91348D56 (Friendly Name: ).2330400-92233720368547758083292Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4176924n-h1-714676-12.cbci-714676-12.local11/23/2021 2:29:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D961A660-4D4D-4FAA-85C0-178019130271--7B64A49E-A5AE-4A2C-9AD1-B3B265BB4D21 (Friendly Name: 0865b7c0-ea00-4325-9503-38523c1f2093) successfully connected to port 41DF6855-4CCB-47F9-89B3-F71EAC476055 (Friendly Name: 0865b7c0-ea00-4325-9503-38523c1f2093) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083291Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5882908n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3647055456-1336560973-2149040261-189596136911/23/2021 2:29:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D961A660-4D4D-4FAA-85C0-178019130271--7B64A49E-A5AE-4A2C-9AD1-B3B265BB4D21 (Friendly Name: ).2330400-92233720368547758083290Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5882908n-h1-714676-12.cbci-714676-12.local11/23/2021 2:29:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 43647351-1F66-4D40-AB54-FD7E71110A08--F67AB6FE-5745-4C3F-81AA-D7AAED1D9B47 (Friendly Name: d579dbe3-c909-4eda-aa1b-9322b40d5183).2330400-92233720368547758083289Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48764180n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1130656593-1296047974-2130531499-13487755311/23/2021 2:29:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 43647351-1F66-4D40-AB54-FD7E71110A08--F67AB6FE-5745-4C3F-81AA-D7AAED1D9B47 successfully disconnected from port .2340400-92233720368547758083288Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48764180n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1130656593-1296047974-2130531499-13487755311/23/2021 2:29:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C004F7F2-6F61-437F-A808-0B0929FC27CB--5A845151-E948-42D0-B6DC-A67A68325578 (Friendly Name: b2b06f13-bc58-439e-9f19-e0ff384c3f72) successfully connected to port AD912104-9F6A-4B1C-BDE3-3DA5FAF74809 (Friendly Name: b2b06f13-bc58-439e-9f19-e0ff384c3f72) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083287Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem16404064n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3221551090-1132425057-151718056-340839530511/23/2021 2:28:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C004F7F2-6F61-437F-A808-0B0929FC27CB--5A845151-E948-42D0-B6DC-A67A68325578 (Friendly Name: ).2330400-92233720368547758083286Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem16404064n-h1-714676-12.cbci-714676-12.local11/23/2021 2:28:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CFB6002F-46D5-42D5-A067-F11B61626A22--D3A790EA-702F-4B58-AC86-E6D470BA52B0 (Friendly Name: 5896d80f-3dae-4c53-bd49-bd68e9fdf085).2330400-92233720368547758083285Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3204824n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3484811311-1121273557-468805536-57739734511/23/2021 2:28:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CFB6002F-46D5-42D5-A067-F11B61626A22--D3A790EA-702F-4B58-AC86-E6D470BA52B0 successfully disconnected from port .2340400-92233720368547758083284Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3204824n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3484811311-1121273557-468805536-57739734511/23/2021 2:28:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CFB6002F-46D5-42D5-A067-F11B61626A22--D3A790EA-702F-4B58-AC86-E6D470BA52B0 (Friendly Name: 5896d80f-3dae-4c53-bd49-bd68e9fdf085) successfully connected to port 8B9E1D6C-9307-4781-9C33-31C383FF2AC5 (Friendly Name: 5896d80f-3dae-4c53-bd49-bd68e9fdf085) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083283Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3204824n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3484811311-1121273557-468805536-57739734511/23/2021 2:28:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CFB6002F-46D5-42D5-A067-F11B61626A22--D3A790EA-702F-4B58-AC86-E6D470BA52B0 (Friendly Name: ).2330400-92233720368547758083282Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3204824n-h1-714676-12.cbci-714676-12.local11/23/2021 2:28:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3A6E259D-3E8F-4BB8-8E3B-32C20351B4BA--DE721125-3769-4360-9EA9-614AF9C10B11 (Friendly Name: 4c55602d-5157-4765-b3b5-fa135b535759).2330400-92233720368547758083281Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45644452n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-980297117-1270365839-3258071950-313237939511/23/2021 2:28:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3A6E259D-3E8F-4BB8-8E3B-32C20351B4BA--DE721125-3769-4360-9EA9-614AF9C10B11 successfully disconnected from port .2340400-92233720368547758083280Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45644452n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-980297117-1270365839-3258071950-313237939511/23/2021 2:28:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5603555D-2AB6-4F42-87D3-9F0F1E03287B--3077BDCA-6E07-44F4-B5FB-2CF0C46BF749 (Friendly Name: a2cb2996-8d03-4cea-bc3b-2892f5644e21).2330400-92233720368547758083279Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44204700n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1443059037-1329736374-262132615-206621980611/23/2021 2:28:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5603555D-2AB6-4F42-87D3-9F0F1E03287B--3077BDCA-6E07-44F4-B5FB-2CF0C46BF749 successfully disconnected from port .2340400-92233720368547758083278Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44204700n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1443059037-1329736374-262132615-206621980611/23/2021 2:28:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5603555D-2AB6-4F42-87D3-9F0F1E03287B--3077BDCA-6E07-44F4-B5FB-2CF0C46BF749 (Friendly Name: a2cb2996-8d03-4cea-bc3b-2892f5644e21) successfully connected to port 7200290B-806C-410C-8DE5-4E437D266330 (Friendly Name: a2cb2996-8d03-4cea-bc3b-2892f5644e21) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083277Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44204808n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1443059037-1329736374-262132615-206621980611/23/2021 2:28:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5603555D-2AB6-4F42-87D3-9F0F1E03287B--3077BDCA-6E07-44F4-B5FB-2CF0C46BF749 (Friendly Name: ).2330400-92233720368547758083276Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44204808n-h1-714676-12.cbci-714676-12.local11/23/2021 2:28:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C51543CD-768A-4D94-92EF-82C14ABAAAF4--707E3F67-203A-4993-A79A-FFB3ECAE5C5A (Friendly Name: 2ca50b11-d5c5-4790-a180-ab19ddb710ce).2330400-92233720368547758083275Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10204508n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3306505165-1301575306-3246583698-410482951411/23/2021 2:28:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C51543CD-768A-4D94-92EF-82C14ABAAAF4--707E3F67-203A-4993-A79A-FFB3ECAE5C5A successfully disconnected from port .2340400-92233720368547758083274Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10204508n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3306505165-1301575306-3246583698-410482951411/23/2021 2:28:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C51543CD-768A-4D94-92EF-82C14ABAAAF4--83B2A87A-FC7F-4780-9773-346FF54647C6 (Friendly Name: 4f78bfd8-2e2d-476a-9899-dc90194c39bb).2330400-92233720368547758083273Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10204508n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3306505165-1301575306-3246583698-410482951411/23/2021 2:28:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C51543CD-768A-4D94-92EF-82C14ABAAAF4--83B2A87A-FC7F-4780-9773-346FF54647C6 successfully disconnected from port .2340400-92233720368547758083272Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10204508n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3306505165-1301575306-3246583698-410482951411/23/2021 2:28:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C51543CD-768A-4D94-92EF-82C14ABAAAF4--5520943C-C28B-4525-90B9-907E60E23FFF (Friendly Name: 5a2cfe7d-b69e-4c31-8e12-2a642e2d937e).2330400-92233720368547758083271Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10204508n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3306505165-1301575306-3246583698-410482951411/23/2021 2:28:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C51543CD-768A-4D94-92EF-82C14ABAAAF4--5520943C-C28B-4525-90B9-907E60E23FFF successfully disconnected from port .2340400-92233720368547758083270Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10204508n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3306505165-1301575306-3246583698-410482951411/23/2021 2:28:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C51543CD-768A-4D94-92EF-82C14ABAAAF4--5520943C-C28B-4525-90B9-907E60E23FFF (Friendly Name: 5a2cfe7d-b69e-4c31-8e12-2a642e2d937e) successfully connected to port BE73F8AC-B8DA-4925-8E4D-AB678145E87E (Friendly Name: 5a2cfe7d-b69e-4c31-8e12-2a642e2d937e) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083269Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10204508n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3306505165-1301575306-3246583698-410482951411/23/2021 2:28:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C51543CD-768A-4D94-92EF-82C14ABAAAF4--5520943C-C28B-4525-90B9-907E60E23FFF (Friendly Name: ).2330400-92233720368547758083268Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10204508n-h1-714676-12.cbci-714676-12.local11/23/2021 2:28:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C51543CD-768A-4D94-92EF-82C14ABAAAF4--83B2A87A-FC7F-4780-9773-346FF54647C6 (Friendly Name: 4f78bfd8-2e2d-476a-9899-dc90194c39bb) successfully connected to port 1E432EFD-ECE9-4AAA-A1C8-E6BD17524B5B (Friendly Name: 4f78bfd8-2e2d-476a-9899-dc90194c39bb) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083267Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10204508n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3306505165-1301575306-3246583698-410482951411/23/2021 2:28:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C51543CD-768A-4D94-92EF-82C14ABAAAF4--83B2A87A-FC7F-4780-9773-346FF54647C6 (Friendly Name: ).2330400-92233720368547758083266Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10204508n-h1-714676-12.cbci-714676-12.local11/23/2021 2:28:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C51543CD-768A-4D94-92EF-82C14ABAAAF4--707E3F67-203A-4993-A79A-FFB3ECAE5C5A (Friendly Name: 2ca50b11-d5c5-4790-a180-ab19ddb710ce) successfully connected to port AFD56D5F-E07D-4AE9-AB33-95FCFA4222E8 (Friendly Name: 2ca50b11-d5c5-4790-a180-ab19ddb710ce) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083265Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10204508n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3306505165-1301575306-3246583698-410482951411/23/2021 2:28:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C51543CD-768A-4D94-92EF-82C14ABAAAF4--707E3F67-203A-4993-A79A-FFB3ECAE5C5A (Friendly Name: ).2330400-92233720368547758083264Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10204508n-h1-714676-12.cbci-714676-12.local11/23/2021 2:28:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 054893AD-6AF4-446F-9E5C-B4651B218666--1BEC20F8-2ADC-44A4-9D26-F40C435414F3 (Friendly Name: 5ceb43cf-1537-4102-bfd0-f8bb8d67f57f).2330400-92233720368547758083263Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30281832n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-88642477-1148152564-1706319006-172006633111/23/2021 2:28:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 054893AD-6AF4-446F-9E5C-B4651B218666--1BEC20F8-2ADC-44A4-9D26-F40C435414F3 successfully disconnected from port .2340400-92233720368547758083262Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30281832n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-88642477-1148152564-1706319006-172006633111/23/2021 2:28:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 83F46C10-A716-44A4-8E0F-B1494A469271--69C981FF-DC6E-4D6A-878F-25C364D7AD40 (Friendly Name: 53c6c39c-c800-4ae3-b136-c83aecd3a55d).2330400-92233720368547758083261Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45561552n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2213833744-1151641366-1236340622-190541165811/23/2021 2:28:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 83F46C10-A716-44A4-8E0F-B1494A469271--69C981FF-DC6E-4D6A-878F-25C364D7AD40 successfully disconnected from port .2340400-92233720368547758083260Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45561552n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2213833744-1151641366-1236340622-190541165811/23/2021 2:28:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 054893AD-6AF4-446F-9E5C-B4651B218666--1BEC20F8-2ADC-44A4-9D26-F40C435414F3 (Friendly Name: 5ceb43cf-1537-4102-bfd0-f8bb8d67f57f) successfully connected to port C4DD452A-97EB-4C48-99A6-DCAEBB96EE3C (Friendly Name: 5ceb43cf-1537-4102-bfd0-f8bb8d67f57f) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083259Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30281832n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-88642477-1148152564-1706319006-172006633111/23/2021 2:27:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 054893AD-6AF4-446F-9E5C-B4651B218666--1BEC20F8-2ADC-44A4-9D26-F40C435414F3 (Friendly Name: ).2330400-92233720368547758083258Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30281832n-h1-714676-12.cbci-714676-12.local11/23/2021 2:27:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403257Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 2:27:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 177134CA-1D5E-4984-B438-5E48E391C19A--2C8E75B7-F527-41AB-8A62-880BAD13DB58 (Friendly Name: 5a276abc-352a-467f-93cc-cef1086b1ed8).2330400-92233720368547758083256Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41643196n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-393295050-1233395038-1214134452-259637705911/23/2021 2:27:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 177134CA-1D5E-4984-B438-5E48E391C19A--2C8E75B7-F527-41AB-8A62-880BAD13DB58 successfully disconnected from port .2340400-92233720368547758083255Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41643196n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-393295050-1233395038-1214134452-259637705911/23/2021 2:27:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 83F46C10-A716-44A4-8E0F-B1494A469271--69C981FF-DC6E-4D6A-878F-25C364D7AD40 (Friendly Name: 53c6c39c-c800-4ae3-b136-c83aecd3a55d) successfully connected to port 0EC7348C-39CE-4D83-A208-5A9457D6C7E7 (Friendly Name: 53c6c39c-c800-4ae3-b136-c83aecd3a55d) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083254Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45561016n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2213833744-1151641366-1236340622-190541165811/23/2021 2:27:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 83F46C10-A716-44A4-8E0F-B1494A469271--69C981FF-DC6E-4D6A-878F-25C364D7AD40 (Friendly Name: ).2330400-92233720368547758083253Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45561016n-h1-714676-12.cbci-714676-12.local11/23/2021 2:27:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 177134CA-1D5E-4984-B438-5E48E391C19A--2C8E75B7-F527-41AB-8A62-880BAD13DB58 (Friendly Name: 5a276abc-352a-467f-93cc-cef1086b1ed8) successfully connected to port 41CB53C5-FF20-41A9-B313-1B12B56DBB9D (Friendly Name: 5a276abc-352a-467f-93cc-cef1086b1ed8) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083252Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41642052n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-393295050-1233395038-1214134452-259637705911/23/2021 2:27:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 177134CA-1D5E-4984-B438-5E48E391C19A--2C8E75B7-F527-41AB-8A62-880BAD13DB58 (Friendly Name: ).2330400-92233720368547758083251Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41642052n-h1-714676-12.cbci-714676-12.local11/23/2021 2:27:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 43647351-1F66-4D40-AB54-FD7E71110A08--F67AB6FE-5745-4C3F-81AA-D7AAED1D9B47 (Friendly Name: d579dbe3-c909-4eda-aa1b-9322b40d5183) successfully connected to port F6EF11D4-5FE3-43BB-B230-61720FBF452C (Friendly Name: d579dbe3-c909-4eda-aa1b-9322b40d5183) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083250Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48764912n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1130656593-1296047974-2130531499-13487755311/23/2021 2:27:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 43647351-1F66-4D40-AB54-FD7E71110A08--F67AB6FE-5745-4C3F-81AA-D7AAED1D9B47 (Friendly Name: ).2330400-92233720368547758083249Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48764912n-h1-714676-12.cbci-714676-12.local11/23/2021 2:27:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F8ADFC1E-D38B-45FA-BDEC-CCE2C3778C1F--A606C18C-A00E-4A27-B279-41F8CDEB78D9 (Friendly Name: 40a3cb96-5f7e-46bd-94d0-a6f61827539b).2330400-92233720368547758083248Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43964832n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4172151838-1174066059-3805080765-52929939511/23/2021 2:27:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F8ADFC1E-D38B-45FA-BDEC-CCE2C3778C1F--A606C18C-A00E-4A27-B279-41F8CDEB78D9 successfully disconnected from port .2340400-92233720368547758083247Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43964832n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4172151838-1174066059-3805080765-52929939511/23/2021 2:27:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A08AD717-688F-4141-9718-1C2B9CCAC5E1--EF1372EB-DA95-4B1B-A307-F2E66740AA31 (Friendly Name: e0d4fb98-14db-43ca-ae52-6223be0b268d).2330400-92233720368547758083246Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47804700n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2693453591-1094805647-723261591-378783606011/23/2021 2:26:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A08AD717-688F-4141-9718-1C2B9CCAC5E1--EF1372EB-DA95-4B1B-A307-F2E66740AA31 successfully disconnected from port .2340400-92233720368547758083245Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47804700n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2693453591-1094805647-723261591-378783606011/23/2021 2:26:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A08AD717-688F-4141-9718-1C2B9CCAC5E1--EF1372EB-DA95-4B1B-A307-F2E66740AA31 (Friendly Name: e0d4fb98-14db-43ca-ae52-6223be0b268d) successfully connected to port 0A6E0A1B-3F88-4F8D-87F9-938A7C1C7B83 (Friendly Name: e0d4fb98-14db-43ca-ae52-6223be0b268d) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083244Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47804700n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2693453591-1094805647-723261591-378783606011/23/2021 2:26:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A08AD717-688F-4141-9718-1C2B9CCAC5E1--EF1372EB-DA95-4B1B-A307-F2E66740AA31 (Friendly Name: ).2330400-92233720368547758083243Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47804700n-h1-714676-12.cbci-714676-12.local11/23/2021 2:26:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F8ADFC1E-D38B-45FA-BDEC-CCE2C3778C1F--A606C18C-A00E-4A27-B279-41F8CDEB78D9 (Friendly Name: 40a3cb96-5f7e-46bd-94d0-a6f61827539b) successfully connected to port E85D7420-343B-4CBC-AB50-37A4B6551E5B (Friendly Name: 40a3cb96-5f7e-46bd-94d0-a6f61827539b) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083242Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43964828n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4172151838-1174066059-3805080765-52929939511/23/2021 2:26:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F8ADFC1E-D38B-45FA-BDEC-CCE2C3778C1F--A606C18C-A00E-4A27-B279-41F8CDEB78D9 (Friendly Name: ).2330400-92233720368547758083241Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43964828n-h1-714676-12.cbci-714676-12.local11/23/2021 2:26:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3A6E259D-3E8F-4BB8-8E3B-32C20351B4BA--DE721125-3769-4360-9EA9-614AF9C10B11 (Friendly Name: 4c55602d-5157-4765-b3b5-fa135b535759) successfully connected to port 8DD4BE8D-60B1-4A8F-9DA4-537D126FB570 (Friendly Name: 4c55602d-5157-4765-b3b5-fa135b535759) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083240Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45644004n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-980297117-1270365839-3258071950-313237939511/23/2021 2:26:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3A6E259D-3E8F-4BB8-8E3B-32C20351B4BA--DE721125-3769-4360-9EA9-614AF9C10B11 (Friendly Name: ).2330400-92233720368547758083239Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45644004n-h1-714676-12.cbci-714676-12.local11/23/2021 2:26:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F1CA4CB0-9823-4C4F-9F6F-FBFB5C834DEA--9E0BF8C1-62BF-4466-9FE9-D388D08ECE06 (Friendly Name: 7555ad29-f385-4bc1-9d90-50ab64643e11).2330400-92233720368547758083238Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33202808n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4056566960-1280284707-4227559327-393094844411/23/2021 2:26:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F1CA4CB0-9823-4C4F-9F6F-FBFB5C834DEA--9E0BF8C1-62BF-4466-9FE9-D388D08ECE06 successfully disconnected from port .2340400-92233720368547758083237Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33202808n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4056566960-1280284707-4227559327-393094844411/23/2021 2:26:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BFA4110D-4E0C-42FB-B85D-F5980DC224F8--D011D76D-754B-4567-BF7E-C4228AD27488 (Friendly Name: 515f02e1-e284-4319-bb13-1c73976524d4).2330400-92233720368547758083236Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24842488n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3215200525-1123765772-2566217144-416315854111/23/2021 2:26:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BFA4110D-4E0C-42FB-B85D-F5980DC224F8--D011D76D-754B-4567-BF7E-C4228AD27488 successfully disconnected from port .2340400-92233720368547758083235Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24842488n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3215200525-1123765772-2566217144-416315854111/23/2021 2:26:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F1CA4CB0-9823-4C4F-9F6F-FBFB5C834DEA--9E0BF8C1-62BF-4466-9FE9-D388D08ECE06 (Friendly Name: 7555ad29-f385-4bc1-9d90-50ab64643e11) successfully connected to port 8EB0B071-7E75-4D31-BF62-2C7BE292185A (Friendly Name: 7555ad29-f385-4bc1-9d90-50ab64643e11) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083234Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33202808n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4056566960-1280284707-4227559327-393094844411/23/2021 2:26:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F1CA4CB0-9823-4C4F-9F6F-FBFB5C834DEA--9E0BF8C1-62BF-4466-9FE9-D388D08ECE06 (Friendly Name: ).2330400-92233720368547758083233Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33202808n-h1-714676-12.cbci-714676-12.local11/23/2021 2:26:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403232Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:26:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D9A0C2E2-6EC3-4AED-8490-24DD85FFEF06--3CCC26CE-44B4-4323-99AB-C6D98BB01F4B (Friendly Name: 54c5ee39-0e4c-4df7-b961-9eb6ca0a8926) successfully connected to port 132515C5-04CF-4B4D-A481-26BA34348296 (Friendly Name: 54c5ee39-0e4c-4df7-b961-9eb6ca0a8926) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083231Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36723624n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3651191522-1257074371-3710161028-11639181311/23/2021 2:26:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D9A0C2E2-6EC3-4AED-8490-24DD85FFEF06--3CCC26CE-44B4-4323-99AB-C6D98BB01F4B (Friendly Name: ).2330400-92233720368547758083230Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36723624n-h1-714676-12.cbci-714676-12.local11/23/2021 2:26:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BFA4110D-4E0C-42FB-B85D-F5980DC224F8--D011D76D-754B-4567-BF7E-C4228AD27488 (Friendly Name: 515f02e1-e284-4319-bb13-1c73976524d4) successfully connected to port DBF58197-B178-40EE-8DC7-0AC81D3CE8B1 (Friendly Name: 515f02e1-e284-4319-bb13-1c73976524d4) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083229Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24843492n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3215200525-1123765772-2566217144-416315854111/23/2021 2:26:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BFA4110D-4E0C-42FB-B85D-F5980DC224F8--D011D76D-754B-4567-BF7E-C4228AD27488 (Friendly Name: ).2330400-92233720368547758083228Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24843492n-h1-714676-12.cbci-714676-12.local11/23/2021 2:26:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403227Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:25:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Registry service entered the stopped state.7036016384400-91873432398358118403226Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:25:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 531BD5FF-DAD7-42AD-B345-4FF1920FAF6C--45758B39-BA29-4133-9D45-440710084C83 (Friendly Name: 2e42c136-ed3e-404d-9976-abfd850df0cb).2330400-92233720368547758083225Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50483776n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1394333183-1118690007-4048504243-182341211411/23/2021 2:25:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 531BD5FF-DAD7-42AD-B345-4FF1920FAF6C--45758B39-BA29-4133-9D45-440710084C83 successfully disconnected from port .2340400-92233720368547758083224Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50483776n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1394333183-1118690007-4048504243-182341211411/23/2021 2:25:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 8B096BA5-FFE8-4F7E-92C1-431E0D90A50A--0B41BE1C-F561-4FD2-AC1F-B3B7EBC6CDEB (Friendly Name: d7524130-18fd-4b84-aa24-25178f4d83ba).2330400-92233720368547758083223Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21204912n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2332650405-1333723112-507756946-17862247711/23/2021 2:25:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8B096BA5-FFE8-4F7E-92C1-431E0D90A50A--0B41BE1C-F561-4FD2-AC1F-B3B7EBC6CDEB successfully disconnected from port .2340400-92233720368547758083222Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21204912n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2332650405-1333723112-507756946-17862247711/23/2021 2:25:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8B096BA5-FFE8-4F7E-92C1-431E0D90A50A--0B41BE1C-F561-4FD2-AC1F-B3B7EBC6CDEB (Friendly Name: d7524130-18fd-4b84-aa24-25178f4d83ba) successfully connected to port E6738A6F-73AB-4EC2-824F-61778651A6FB (Friendly Name: d7524130-18fd-4b84-aa24-25178f4d83ba) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083221Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21204980n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2332650405-1333723112-507756946-17862247711/23/2021 2:25:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 8B096BA5-FFE8-4F7E-92C1-431E0D90A50A--0B41BE1C-F561-4FD2-AC1F-B3B7EBC6CDEB (Friendly Name: ).2330400-92233720368547758083220Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21204980n-h1-714676-12.cbci-714676-12.local11/23/2021 2:25:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0C20E6BB-D412-4A99-87AD-54F8D351E33C--F3952AC9-97AD-4C41-A74B-A70B367CB5C9 (Friendly Name: 9261f1ff-10e4-41b0-8fee-1a6ee42e22f1).2330400-92233720368547758083219Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem672812n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-203482811-1251595282-4166299015-102153057911/23/2021 2:25:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0C20E6BB-D412-4A99-87AD-54F8D351E33C--F3952AC9-97AD-4C41-A74B-A70B367CB5C9 successfully disconnected from port .2340400-92233720368547758083218Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem672812n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-203482811-1251595282-4166299015-102153057911/23/2021 2:25:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5CFC82A7-2F51-41ED-9A20-3089A5472504--8F662013-773C-4963-AB97-14BB51F1AB6E (Friendly Name: af91c5f6-cb7c-47b0-8b77-1a9dbdf80a08).2330400-92233720368547758083217Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47004728n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1560052391-1106063185-2301632666-6955203711/23/2021 2:25:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5CFC82A7-2F51-41ED-9A20-3089A5472504--8F662013-773C-4963-AB97-14BB51F1AB6E successfully disconnected from port .2340400-92233720368547758083216Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47004728n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1560052391-1106063185-2301632666-6955203711/23/2021 2:25:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5CFC82A7-2F51-41ED-9A20-3089A5472504--8F662013-773C-4963-AB97-14BB51F1AB6E (Friendly Name: af91c5f6-cb7c-47b0-8b77-1a9dbdf80a08) successfully connected to port FDAB4F74-491D-4B19-88BA-3E5498A8E061 (Friendly Name: af91c5f6-cb7c-47b0-8b77-1a9dbdf80a08) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083215Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47004728n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1560052391-1106063185-2301632666-6955203711/23/2021 2:25:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5CFC82A7-2F51-41ED-9A20-3089A5472504--8F662013-773C-4963-AB97-14BB51F1AB6E (Friendly Name: ).2330400-92233720368547758083214Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47004728n-h1-714676-12.cbci-714676-12.local11/23/2021 2:25:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 11FD6FE1-1E28-4C2A-9F4A-F90579AD7F5D--C6591F00-7F2F-452B-B77C-1DB2CC62CE6F (Friendly Name: 6266b558-b673-4a04-be8c-647e5fd467a1).2330400-92233720368547758083213Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45081536n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-301821921-1277828648-100223647-156864856911/23/2021 2:25:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 11FD6FE1-1E28-4C2A-9F4A-F90579AD7F5D--C6591F00-7F2F-452B-B77C-1DB2CC62CE6F successfully disconnected from port .2340400-92233720368547758083212Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45081536n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-301821921-1277828648-100223647-156864856911/23/2021 2:25:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-63-07-DC has moved from port 4C305B6D-0D84-4475-871A-37F88A232F33 (Friendly Name: 6266b558-b673-4a04-be8c-647e5fd467a1) to port 4C305B6D-0D84-4475-871A-37F88A232F33 (Friendly Name: 6266b558-b673-4a04-be8c-647e5fd467a1).250410180-92233720368547758083211Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044196n-h1-714676-12.cbci-714676-12.local11/23/2021 2:25:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 11FD6FE1-1E28-4C2A-9F4A-F90579AD7F5D--C6591F00-7F2F-452B-B77C-1DB2CC62CE6F (Friendly Name: 6266b558-b673-4a04-be8c-647e5fd467a1) successfully connected to port 4C305B6D-0D84-4475-871A-37F88A232F33 (Friendly Name: 6266b558-b673-4a04-be8c-647e5fd467a1) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083210Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45084220n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-301821921-1277828648-100223647-156864856911/23/2021 2:25:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 11FD6FE1-1E28-4C2A-9F4A-F90579AD7F5D--C6591F00-7F2F-452B-B77C-1DB2CC62CE6F (Friendly Name: ).2330400-92233720368547758083209Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45083428n-h1-714676-12.cbci-714676-12.local11/23/2021 2:25:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 8EAC5170-B638-442F-8FAE-5F1216ABC78B--78DFFD5D-257D-4655-A84A-C876036C16F8 (Friendly Name: 965ee4b3-b464-42a8-b077-8047e84bddcd).2330400-92233720368547758083208Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9604084n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2393657712-1143977528-308260495-234511848611/23/2021 2:25:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8EAC5170-B638-442F-8FAE-5F1216ABC78B--78DFFD5D-257D-4655-A84A-C876036C16F8 successfully disconnected from port .2340400-92233720368547758083207Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9604084n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2393657712-1143977528-308260495-234511848611/23/2021 2:25:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8EAC5170-B638-442F-8FAE-5F1216ABC78B--78DFFD5D-257D-4655-A84A-C876036C16F8 (Friendly Name: 965ee4b3-b464-42a8-b077-8047e84bddcd) successfully connected to port E5E1264E-0067-419B-8E18-59E81D7CC030 (Friendly Name: 965ee4b3-b464-42a8-b077-8047e84bddcd) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083206Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9602800n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2393657712-1143977528-308260495-234511848611/23/2021 2:25:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 8EAC5170-B638-442F-8FAE-5F1216ABC78B--78DFFD5D-257D-4655-A84A-C876036C16F8 (Friendly Name: ).2330400-92233720368547758083205Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9602800n-h1-714676-12.cbci-714676-12.local11/23/2021 2:25:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EBBEE957-C8E1-4640-A8A8-93458C9B3322--CC93FC8F-BB54-464C-AA04-46CE57ABABA9 (Friendly Name: 5f9409a8-cdb9-4484-b9fe-0c5b5ee9d6c1).2330400-92233720368547758083204Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8321144n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3955157335-1178650849-1167304872-57380750011/23/2021 2:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EBBEE957-C8E1-4640-A8A8-93458C9B3322--CC93FC8F-BB54-464C-AA04-46CE57ABABA9 successfully disconnected from port .2340400-92233720368547758083203Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8321144n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3955157335-1178650849-1167304872-57380750011/23/2021 2:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B165AAF8-C8AD-4C4F-ACCA-5E3FFAE8220C--4C7CEC6B-3A61-45FF-8206-09B32B7574E3 (Friendly Name: 964f6acc-77f7-4188-9e14-129cc2e8bfff).2330400-92233720368547758083202Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46164712n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2976230136-1280297133-1063176876-20361445811/23/2021 2:24:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B165AAF8-C8AD-4C4F-ACCA-5E3FFAE8220C--4C7CEC6B-3A61-45FF-8206-09B32B7574E3 successfully disconnected from port .2340400-92233720368547758083201Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46164712n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2976230136-1280297133-1063176876-20361445811/23/2021 2:24:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 938D5CED-EE51-4298-8500-05F7AF892C94--E6F8FCD2-5C7D-4C38-A020-7BAE62144616 (Friendly Name: 06fca24e-c3e9-4bde-bcfd-450b662c1c14).2330400-92233720368547758083200Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32684248n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2475515117-1117318737-4144300165-248594679911/23/2021 2:24:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 938D5CED-EE51-4298-8500-05F7AF892C94--E6F8FCD2-5C7D-4C38-A020-7BAE62144616 successfully disconnected from port .2340400-92233720368547758083199Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32684248n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2475515117-1117318737-4144300165-248594679911/23/2021 2:24:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 33AE89AC-3868-4EEA-A265-9762FF635EF9--36AE61D2-77DC-4D6E-8976-749A024FB3DF (Friendly Name: c2fb587d-af4a-4cfd-bd05-e448a791eadb).2330400-92233720368547758083198Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20723176n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-867076524-1323972712-1654089122-418371276711/23/2021 2:24:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 33AE89AC-3868-4EEA-A265-9762FF635EF9--36AE61D2-77DC-4D6E-8976-749A024FB3DF successfully disconnected from port .2340400-92233720368547758083197Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20723176n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-867076524-1323972712-1654089122-418371276711/23/2021 2:24:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 29CC373E-E392-46A0-8A66-E4216941DD91--367E0432-4661-47EE-BD94-AAFBE5540B56 (Friendly Name: fab0baed-f259-47ae-8949-64b5bd75964a).2330400-92233720368547758083196Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14644840n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-701249342-1184949138-568616586-244719652111/23/2021 2:24:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 29CC373E-E392-46A0-8A66-E4216941DD91--367E0432-4661-47EE-BD94-AAFBE5540B56 successfully disconnected from port .2340400-92233720368547758083195Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14644840n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-701249342-1184949138-568616586-244719652111/23/2021 2:24:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-BE-BF-0D has moved from port A26113B2-FE81-4ED1-8ABD-9E2959E77FB8 (Friendly Name: 9261f1ff-10e4-41b0-8fee-1a6ee42e22f1) to port A26113B2-FE81-4ED1-8ABD-9E2959E77FB8 (Friendly Name: 9261f1ff-10e4-41b0-8fee-1a6ee42e22f1).250410180-92233720368547758083194Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044200n-h1-714676-12.cbci-714676-12.local11/23/2021 2:24:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0C20E6BB-D412-4A99-87AD-54F8D351E33C--F3952AC9-97AD-4C41-A74B-A70B367CB5C9 (Friendly Name: 9261f1ff-10e4-41b0-8fee-1a6ee42e22f1) successfully connected to port A26113B2-FE81-4ED1-8ABD-9E2959E77FB8 (Friendly Name: 9261f1ff-10e4-41b0-8fee-1a6ee42e22f1) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083193Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6723376n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-203482811-1251595282-4166299015-102153057911/23/2021 2:24:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BE19718F-CF14-439D-8A6A-3BB455286F21--21173DA6-8D60-4715-9411-359C2ED367AB (Friendly Name: 9726bf27-942e-4d0a-b66c-d65607934fe6).2330400-92233720368547758083192Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46884920n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3189338511-1134415636-3023792778-56093294911/23/2021 2:24:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BE19718F-CF14-439D-8A6A-3BB455286F21--21173DA6-8D60-4715-9411-359C2ED367AB successfully disconnected from port .2340400-92233720368547758083191Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46884920n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3189338511-1134415636-3023792778-56093294911/23/2021 2:24:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0C20E6BB-D412-4A99-87AD-54F8D351E33C--F3952AC9-97AD-4C41-A74B-A70B367CB5C9 (Friendly Name: ).2330400-92233720368547758083190Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6723376n-h1-714676-12.cbci-714676-12.local11/23/2021 2:24:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 33AE89AC-3868-4EEA-A265-9762FF635EF9--36AE61D2-77DC-4D6E-8976-749A024FB3DF (Friendly Name: c2fb587d-af4a-4cfd-bd05-e448a791eadb) successfully connected to port 278EBA2D-AD2C-4CDA-A19C-B22470C9B6A5 (Friendly Name: c2fb587d-af4a-4cfd-bd05-e448a791eadb) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083189Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20722748n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-867076524-1323972712-1654089122-418371276711/23/2021 2:24:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 33AE89AC-3868-4EEA-A265-9762FF635EF9--36AE61D2-77DC-4D6E-8976-749A024FB3DF (Friendly Name: ).2330400-92233720368547758083188Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20722748n-h1-714676-12.cbci-714676-12.local11/23/2021 2:24:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0545CEB4-B25D-43AB-B3D4-186405157C23--7A652068-4964-4584-BD8F-ADC04B73ADA0 (Friendly Name: 9261f1ff-10e4-41b0-8fee-1a6ee42e22f1).2330400-92233720368547758083187Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42684228n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-88460980-1135325789-1679348915-59533440511/23/2021 2:24:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0545CEB4-B25D-43AB-B3D4-186405157C23--7A652068-4964-4584-BD8F-ADC04B73ADA0 successfully disconnected from port .2340400-92233720368547758083186Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42684228n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-88460980-1135325789-1679348915-59533440511/23/2021 2:24:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-BE-BF-0D has moved from port 8F50AB33-FF39-4A47-AC37-E2FD1254FEF6 (Friendly Name: 9261f1ff-10e4-41b0-8fee-1a6ee42e22f1) to port 8F50AB33-FF39-4A47-AC37-E2FD1254FEF6 (Friendly Name: 9261f1ff-10e4-41b0-8fee-1a6ee42e22f1).250410180-92233720368547758083185Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24044196n-h1-714676-12.cbci-714676-12.local11/23/2021 2:24:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0545CEB4-B25D-43AB-B3D4-186405157C23--7A652068-4964-4584-BD8F-ADC04B73ADA0 (Friendly Name: 9261f1ff-10e4-41b0-8fee-1a6ee42e22f1) successfully connected to port 8F50AB33-FF39-4A47-AC37-E2FD1254FEF6 (Friendly Name: 9261f1ff-10e4-41b0-8fee-1a6ee42e22f1) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083184Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42682116n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-88460980-1135325789-1679348915-59533440511/23/2021 2:24:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403183Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:24:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403182Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:24:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BE19718F-CF14-439D-8A6A-3BB455286F21--21173DA6-8D60-4715-9411-359C2ED367AB (Friendly Name: 9726bf27-942e-4d0a-b66c-d65607934fe6) successfully connected to port BB636CFD-1BD3-47B4-8D77-55F7DF30B429 (Friendly Name: 9726bf27-942e-4d0a-b66c-d65607934fe6) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083181Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46883024n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3189338511-1134415636-3023792778-56093294911/23/2021 2:24:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BE19718F-CF14-439D-8A6A-3BB455286F21--21173DA6-8D60-4715-9411-359C2ED367AB (Friendly Name: ).2330400-92233720368547758083180Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46883024n-h1-714676-12.cbci-714676-12.local11/23/2021 2:24:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0545CEB4-B25D-43AB-B3D4-186405157C23--7A652068-4964-4584-BD8F-ADC04B73ADA0 (Friendly Name: ).2330400-92233720368547758083179Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42682116n-h1-714676-12.cbci-714676-12.local11/23/2021 2:24:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 532C3903-22C7-4D39-8914-B243FE2BE491--8997DAE4-7F23-4DE7-B1B5-4D523E02ED13 (Friendly Name: 9261f1ff-10e4-41b0-8fee-1a6ee42e22f1).2330400-92233720368547758083178Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23683708n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1395407107-1295590087-1135744137-244764979011/23/2021 2:23:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 532C3903-22C7-4D39-8914-B243FE2BE491--8997DAE4-7F23-4DE7-B1B5-4D523E02ED13 successfully disconnected from port .2340400-92233720368547758083177Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23683708n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1395407107-1295590087-1135744137-244764979011/23/2021 2:23:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 827EE503-3C40-4054-BBD4-5336F1E47139--8BD4461C-4DBE-4BB7-BD87-02ACB4429058 (Friendly Name: 31207130-ca63-4457-bf0f-770d14f723c8).2330400-92233720368547758083176Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43084580n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2189354243-1079262272-911463611-96376548911/23/2021 2:23:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 827EE503-3C40-4054-BBD4-5336F1E47139--8BD4461C-4DBE-4BB7-BD87-02ACB4429058 successfully disconnected from port .2340400-92233720368547758083175Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43084580n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2189354243-1079262272-911463611-96376548911/23/2021 2:23:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403174Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:23:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 67EAB319-AAE3-4F83-9198-CBB60DDF8BEB--04100129-2B7C-4C18-81DB-CBA14139088D (Friendly Name: 1302067d-c7b3-472f-af06-941928b1a52d).2330400-92233720368547758083173Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45083212n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1743434521-1334029027-3066796177-395181236511/23/2021 2:23:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 67EAB319-AAE3-4F83-9198-CBB60DDF8BEB--04100129-2B7C-4C18-81DB-CBA14139088D successfully disconnected from port .2340400-92233720368547758083172Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45083212n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1743434521-1334029027-3066796177-395181236511/23/2021 2:23:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 532C3903-22C7-4D39-8914-B243FE2BE491--8997DAE4-7F23-4DE7-B1B5-4D523E02ED13 (Friendly Name: 9261f1ff-10e4-41b0-8fee-1a6ee42e22f1) successfully connected to port 135DBADF-FB0D-4047-868E-53E542FED9B8 (Friendly Name: 9261f1ff-10e4-41b0-8fee-1a6ee42e22f1) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083171Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23682508n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1395407107-1295590087-1135744137-244764979011/23/2021 2:23:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 532C3903-22C7-4D39-8914-B243FE2BE491--8997DAE4-7F23-4DE7-B1B5-4D523E02ED13 (Friendly Name: ).2330400-92233720368547758083170Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23682508n-h1-714676-12.cbci-714676-12.local11/23/2021 2:23:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EFBA79B0-0B22-43D5-B01E-F7B0BD2D0106--5F8D8DD3-165F-4C57-8D76-984AE4C14318 (Friendly Name: 0748c3b0-f713-43f9-8375-74e8ebf15214).2330400-92233720368547758083169Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42285104n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4021975472-1138035490-2968985264-10074054111/23/2021 2:23:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EFBA79B0-0B22-43D5-B01E-F7B0BD2D0106--5F8D8DD3-165F-4C57-8D76-984AE4C14318 successfully disconnected from port .2340400-92233720368547758083168Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42285104n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4021975472-1138035490-2968985264-10074054111/23/2021 2:23:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7EC59B95-B1BC-4EBD-AD33-1D40FF6A6E7B--C6274AC6-4D28-4987-A2CB-3899B9291E5F (Friendly Name: 9a3023ce-9c23-4364-970f-598c74abe32a).2330400-92233720368547758083167Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33202268n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2126879637-1321054652-1075655597-207083391911/23/2021 2:23:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EC59B95-B1BC-4EBD-AD33-1D40FF6A6E7B--C6274AC6-4D28-4987-A2CB-3899B9291E5F successfully disconnected from port .2340400-92233720368547758083166Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33202268n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2126879637-1321054652-1075655597-207083391911/23/2021 2:23:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic DBC7CFF6-B24D-4BB6-8D4B-AF27A0ACB762--B3B7A77D-415E-4518-9C6E-75B9399FA3B9 (Friendly Name: 4c59823b-a5da-4e45-832b-db2a5c44bc67).2330400-92233720368547758083165Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13323684n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3687305206-1270264397-665799565-165620444811/23/2021 2:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DBC7CFF6-B24D-4BB6-8D4B-AF27A0ACB762--B3B7A77D-415E-4518-9C6E-75B9399FA3B9 successfully disconnected from port .2340400-92233720368547758083164Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13323684n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3687305206-1270264397-665799565-165620444811/23/2021 2:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DBC7CFF6-B24D-4BB6-8D4B-AF27A0ACB762--B3B7A77D-415E-4518-9C6E-75B9399FA3B9 (Friendly Name: 4c59823b-a5da-4e45-832b-db2a5c44bc67) successfully connected to port CCA5ADCB-F854-4C3B-A740-EF6FE5CF3BED (Friendly Name: 4c59823b-a5da-4e45-832b-db2a5c44bc67) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083163Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1332924n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3687305206-1270264397-665799565-165620444811/23/2021 2:23:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic DBC7CFF6-B24D-4BB6-8D4B-AF27A0ACB762--B3B7A77D-415E-4518-9C6E-75B9399FA3B9 (Friendly Name: ).2330400-92233720368547758083162Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1332924n-h1-714676-12.cbci-714676-12.local11/23/2021 2:23:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7EC59B95-B1BC-4EBD-AD33-1D40FF6A6E7B--C6274AC6-4D28-4987-A2CB-3899B9291E5F (Friendly Name: 9a3023ce-9c23-4364-970f-598c74abe32a) successfully connected to port 92B379F8-D88E-407D-9EA7-F66E176A244C (Friendly Name: 9a3023ce-9c23-4364-970f-598c74abe32a) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083161Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33202672n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2126879637-1321054652-1075655597-207083391911/23/2021 2:22:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7EC59B95-B1BC-4EBD-AD33-1D40FF6A6E7B--C6274AC6-4D28-4987-A2CB-3899B9291E5F (Friendly Name: ).2330400-92233720368547758083160Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33202672n-h1-714676-12.cbci-714676-12.local11/23/2021 2:22:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 41E40B6B-16F4-4DDA-8129-3593B1A34B23--D566EE39-BF63-4EF2-B997-C57A6220796F (Friendly Name: ee5ec2b7-2ecf-4ee6-8f0d-70304f043baa).2330400-92233720368547758083159Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46843224n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1105464171-1306138356-2469734785-59215966511/23/2021 2:22:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 41E40B6B-16F4-4DDA-8129-3593B1A34B23--D566EE39-BF63-4EF2-B997-C57A6220796F successfully disconnected from port .2340400-92233720368547758083158Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46843224n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1105464171-1306138356-2469734785-59215966511/23/2021 2:22:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 827EE503-3C40-4054-BBD4-5336F1E47139--8BD4461C-4DBE-4BB7-BD87-02ACB4429058 (Friendly Name: 31207130-ca63-4457-bf0f-770d14f723c8) successfully connected to port F4503EC4-EFAA-455B-9141-A9EF29157D15 (Friendly Name: 31207130-ca63-4457-bf0f-770d14f723c8) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083157Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43084580n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2189354243-1079262272-911463611-96376548911/23/2021 2:22:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 827EE503-3C40-4054-BBD4-5336F1E47139--8BD4461C-4DBE-4BB7-BD87-02ACB4429058 (Friendly Name: ).2330400-92233720368547758083156Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43084580n-h1-714676-12.cbci-714676-12.local11/23/2021 2:22:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403155Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:22:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403154Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:22:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-19-D0-BA has moved from port 14E3C264-3B65-4657-8DA6-7C9FADCDD18A (Friendly Name: br-data_External) to port A952D2DD-ACB8-4055-BCE2-2B0BA6364099 (Friendly Name: 06fca24e-c3e9-4bde-bcfd-450b662c1c14).250410180-92233720368547758083153Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem00n-h1-714676-12.cbci-714676-12.local11/23/2021 2:22:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 938D5CED-EE51-4298-8500-05F7AF892C94--E6F8FCD2-5C7D-4C38-A020-7BAE62144616 (Friendly Name: 06fca24e-c3e9-4bde-bcfd-450b662c1c14) successfully connected to port A952D2DD-ACB8-4055-BCE2-2B0BA6364099 (Friendly Name: 06fca24e-c3e9-4bde-bcfd-450b662c1c14) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083152Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32682488n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2475515117-1117318737-4144300165-248594679911/23/2021 2:22:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 938D5CED-EE51-4298-8500-05F7AF892C94--E6F8FCD2-5C7D-4C38-A020-7BAE62144616 (Friendly Name: ).2330400-92233720368547758083151Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32682488n-h1-714676-12.cbci-714676-12.local11/23/2021 2:22:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EFBA79B0-0B22-43D5-B01E-F7B0BD2D0106--5F8D8DD3-165F-4C57-8D76-984AE4C14318 (Friendly Name: 0748c3b0-f713-43f9-8375-74e8ebf15214) successfully connected to port C7611DFD-A9C3-49B0-9A3A-B60295F8AAF6 (Friendly Name: 0748c3b0-f713-43f9-8375-74e8ebf15214) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083150Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42282288n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-4021975472-1138035490-2968985264-10074054111/23/2021 2:22:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EFBA79B0-0B22-43D5-B01E-F7B0BD2D0106--5F8D8DD3-165F-4C57-8D76-984AE4C14318 (Friendly Name: ).2330400-92233720368547758083149Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42282288n-h1-714676-12.cbci-714676-12.local11/23/2021 2:22:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 29CC373E-E392-46A0-8A66-E4216941DD91--367E0432-4661-47EE-BD94-AAFBE5540B56 (Friendly Name: fab0baed-f259-47ae-8949-64b5bd75964a) successfully connected to port 61522954-0F9E-408D-A5D4-E2616B678F34 (Friendly Name: fab0baed-f259-47ae-8949-64b5bd75964a) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083148Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14644784n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-701249342-1184949138-568616586-244719652111/23/2021 2:22:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 29CC373E-E392-46A0-8A66-E4216941DD91--367E0432-4661-47EE-BD94-AAFBE5540B56 (Friendly Name: ).2330400-92233720368547758083147Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14644784n-h1-714676-12.cbci-714676-12.local11/23/2021 2:22:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E692405A-0A41-48F7-AF5A-C7935DEB9BE9--EBF47BFA-B6EB-44CC-8B42-608E413D6221 (Friendly Name: e8e4c998-92a6-4ca2-9934-1e7d37decb87).2330400-92233720368547758083146Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39764716n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3868344410-1224149569-2479315631-391930966111/23/2021 2:22:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E692405A-0A41-48F7-AF5A-C7935DEB9BE9--EBF47BFA-B6EB-44CC-8B42-608E413D6221 successfully disconnected from port .2340400-92233720368547758083145Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39764716n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3868344410-1224149569-2479315631-391930966111/23/2021 2:22:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 41E40B6B-16F4-4DDA-8129-3593B1A34B23--D566EE39-BF63-4EF2-B997-C57A6220796F (Friendly Name: ee5ec2b7-2ecf-4ee6-8f0d-70304f043baa) successfully connected to port C7F5FF8B-20A5-4031-B4C1-1B16C55D731C (Friendly Name: ee5ec2b7-2ecf-4ee6-8f0d-70304f043baa) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083144Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46844224n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1105464171-1306138356-2469734785-59215966511/23/2021 2:22:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 41E40B6B-16F4-4DDA-8129-3593B1A34B23--D566EE39-BF63-4EF2-B997-C57A6220796F (Friendly Name: ).2330400-92233720368547758083143Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46844224n-h1-714676-12.cbci-714676-12.local11/23/2021 2:22:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-E0-4D-79 has moved from port 5F86A2DD-55F4-46AF-870C-D7EFCCACE964 (Friendly Name: 2e42c136-ed3e-404d-9976-abfd850df0cb) to port 5F86A2DD-55F4-46AF-870C-D7EFCCACE964 (Friendly Name: 2e42c136-ed3e-404d-9976-abfd850df0cb).250410180-92233720368547758083142Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24042832n-h1-714676-12.cbci-714676-12.local11/23/2021 2:22:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 752173DE-660E-4006-9E03-BE5E9F359540--A4704CBB-471A-4E42-BF83-BE15033E2E34 (Friendly Name: 515adfe2-4901-4cba-bf44-bc617e2fdbac).2330400-92233720368547758083141Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42164232n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1965126622-1074161166-1589511070-108352041511/23/2021 2:22:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 752173DE-660E-4006-9E03-BE5E9F359540--A4704CBB-471A-4E42-BF83-BE15033E2E34 successfully disconnected from port .2340400-92233720368547758083140Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42164232n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1965126622-1074161166-1589511070-108352041511/23/2021 2:22:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 531BD5FF-DAD7-42AD-B345-4FF1920FAF6C--45758B39-BA29-4133-9D45-440710084C83 (Friendly Name: 2e42c136-ed3e-404d-9976-abfd850df0cb) successfully connected to port 5F86A2DD-55F4-46AF-870C-D7EFCCACE964 (Friendly Name: 2e42c136-ed3e-404d-9976-abfd850df0cb) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083139Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem504888n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1394333183-1118690007-4048504243-182341211411/23/2021 2:22:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 531BD5FF-DAD7-42AD-B345-4FF1920FAF6C--45758B39-BA29-4133-9D45-440710084C83 (Friendly Name: ).2330400-92233720368547758083138Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50483776n-h1-714676-12.cbci-714676-12.local11/23/2021 2:22:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 78487EF6-6DEA-4E8B-A825-AAE1867A1D69--5D9B0764-3536-49B2-B3D3-B186161F4423 (Friendly Name: b126e971-fd59-4b5d-8625-7a67b3c9928f).2330400-92233720368547758083137Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48842488n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2018017014-1317760490-3786024360-176353959011/23/2021 2:21:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 78487EF6-6DEA-4E8B-A825-AAE1867A1D69--5D9B0764-3536-49B2-B3D3-B186161F4423 successfully disconnected from port .2340400-92233720368547758083136Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48842488n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2018017014-1317760490-3786024360-176353959011/23/2021 2:21:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 67EAB319-AAE3-4F83-9198-CBB60DDF8BEB--04100129-2B7C-4C18-81DB-CBA14139088D (Friendly Name: 1302067d-c7b3-472f-af06-941928b1a52d) successfully connected to port 20CCC10B-226B-4220-B179-9B819F0994C3 (Friendly Name: 1302067d-c7b3-472f-af06-941928b1a52d) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083135Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45084772n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1743434521-1334029027-3066796177-395181236511/23/2021 2:21:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 67EAB319-AAE3-4F83-9198-CBB60DDF8BEB--04100129-2B7C-4C18-81DB-CBA14139088D (Friendly Name: ).2330400-92233720368547758083134Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45084772n-h1-714676-12.cbci-714676-12.local11/23/2021 2:21:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 602F7EE1-30F2-4646-968A-36374F9BE948--2BE56D2B-0AC0-4F17-9410-D82F6684CC99 (Friendly Name: 0f99c8ce-8ab6-4223-aa5b-05c12f11e939).2330400-92233720368547758083133Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47043076n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1613725409-1179005170-926321302-122326919911/23/2021 2:21:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 602F7EE1-30F2-4646-968A-36374F9BE948--2BE56D2B-0AC0-4F17-9410-D82F6684CC99 successfully disconnected from port .2340400-92233720368547758083132Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47043076n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1613725409-1179005170-926321302-122326919911/23/2021 2:21:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server. This event occurs once per boot of the server on the first time a client uses NTLM with this server. NTLM is a weaker authentication mechanism. Please check: Which applications are using NTLM authentication? Are there configuration issues preventing the use of stronger authentication such as Kerberos authentication? If NTLM must be supported, is Extended Protection configured? Details on how to complete these checks can be found at http://go.microsoft.com/fwlink/?LinkId=225699.603800300360287970189639683131LsaSrv199fe037-2b82-40a9-82ac-e1d46c792b99System00n-h1-714676-12.cbci-714676-12.local11/23/2021 2:21:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E692405A-0A41-48F7-AF5A-C7935DEB9BE9--EBF47BFA-B6EB-44CC-8B42-608E413D6221 (Friendly Name: e8e4c998-92a6-4ca2-9934-1e7d37decb87) successfully connected to port FBEAF9B0-FD5B-472D-9257-95B4CFF8D911 (Friendly Name: e8e4c998-92a6-4ca2-9934-1e7d37decb87) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083130Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39764716n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3868344410-1224149569-2479315631-391930966111/23/2021 2:21:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E692405A-0A41-48F7-AF5A-C7935DEB9BE9--EBF47BFA-B6EB-44CC-8B42-608E413D6221 (Friendly Name: ).2330400-92233720368547758083129Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39764716n-h1-714676-12.cbci-714676-12.local11/23/2021 2:21:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the running state.7036016384400-91873432398358118403128Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001236n-h1-714676-12.cbci-714676-12.local11/23/2021 2:21:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1FBF86CD-FD06-4C27-9104-D78C3B44AA86--9EF5AF98-9720-411A-A6B4-8997593B030F (Friendly Name: e8e4c998-92a6-4ca2-9934-1e7d37decb87).2330400-92233720368547758083127Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45964468n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-532645581-1277689094-2362901649-225930553111/23/2021 2:21:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1FBF86CD-FD06-4C27-9104-D78C3B44AA86--9EF5AF98-9720-411A-A6B4-8997593B030F successfully disconnected from port .2340400-92233720368547758083126Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45964468n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-532645581-1277689094-2362901649-225930553111/23/2021 2:21:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403125Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001236n-h1-714676-12.cbci-714676-12.local11/23/2021 2:21:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403124Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.local11/23/2021 2:21:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 78487EF6-6DEA-4E8B-A825-AAE1867A1D69--5D9B0764-3536-49B2-B3D3-B186161F4423 (Friendly Name: b126e971-fd59-4b5d-8625-7a67b3c9928f) successfully connected to port 65F6A722-C7AC-4B1F-AD3F-868E76C6B45A (Friendly Name: b126e971-fd59-4b5d-8625-7a67b3c9928f) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083123Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48842488n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2018017014-1317760490-3786024360-176353959011/23/2021 2:21:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 78487EF6-6DEA-4E8B-A825-AAE1867A1D69--5D9B0764-3536-49B2-B3D3-B186161F4423 (Friendly Name: ).2330400-92233720368547758083122Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48842488n-h1-714676-12.cbci-714676-12.local11/23/2021 2:21:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1FBF86CD-FD06-4C27-9104-D78C3B44AA86--9EF5AF98-9720-411A-A6B4-8997593B030F (Friendly Name: e8e4c998-92a6-4ca2-9934-1e7d37decb87) successfully connected to port 2D6E09FF-1700-4299-9BFB-BE4F703FE5F0 (Friendly Name: e8e4c998-92a6-4ca2-9934-1e7d37decb87) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083121Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45964064n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-532645581-1277689094-2362901649-225930553111/23/2021 2:20:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1FBF86CD-FD06-4C27-9104-D78C3B44AA86--9EF5AF98-9720-411A-A6B4-8997593B030F (Friendly Name: ).2330400-92233720368547758083120Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45964064n-h1-714676-12.cbci-714676-12.local11/23/2021 2:20:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B165AAF8-C8AD-4C4F-ACCA-5E3FFAE8220C--4C7CEC6B-3A61-45FF-8206-09B32B7574E3 (Friendly Name: 964f6acc-77f7-4188-9e14-129cc2e8bfff) successfully connected to port B496A481-337B-4824-9F28-2FB9FB354AB1 (Friendly Name: 964f6acc-77f7-4188-9e14-129cc2e8bfff) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083119Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46164712n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2976230136-1280297133-1063176876-20361445811/23/2021 2:20:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B165AAF8-C8AD-4C4F-ACCA-5E3FFAE8220C--4C7CEC6B-3A61-45FF-8206-09B32B7574E3 (Friendly Name: ).2330400-92233720368547758083118Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46164712n-h1-714676-12.cbci-714676-12.local11/23/2021 2:20:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403117Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001236n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:20:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403116Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001236n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:20:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 8C8E6A05-C656-4857-8137-54DA3F65CA34--C94F3C5F-149F-4AED-9C4D-76859AAE9455 (Friendly Name: e8e4c998-92a6-4ca2-9934-1e7d37decb87).2330400-92233720368547758083115Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34522560n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2358143493-1213711958-3662952321-88567942311/23/2021 2:20:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8C8E6A05-C656-4857-8137-54DA3F65CA34--C94F3C5F-149F-4AED-9C4D-76859AAE9455 successfully disconnected from port .2340400-92233720368547758083114Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34522560n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2358143493-1213711958-3662952321-88567942311/23/2021 2:20:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403113Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.local11/23/2021 2:20:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 602F7EE1-30F2-4646-968A-36374F9BE948--2BE56D2B-0AC0-4F17-9410-D82F6684CC99 (Friendly Name: 0f99c8ce-8ab6-4223-aa5b-05c12f11e939) successfully connected to port 63F8E2FE-0252-4767-8F8F-63C356B1BA2E (Friendly Name: 0f99c8ce-8ab6-4223-aa5b-05c12f11e939) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083112Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47044700n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1613725409-1179005170-926321302-122326919911/23/2021 2:20:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 602F7EE1-30F2-4646-968A-36374F9BE948--2BE56D2B-0AC0-4F17-9410-D82F6684CC99 (Friendly Name: ).2330400-92233720368547758083111Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47044700n-h1-714676-12.cbci-714676-12.local11/23/2021 2:20:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403110Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:20:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403109Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:20:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EBBEE957-C8E1-4640-A8A8-93458C9B3322--CC93FC8F-BB54-464C-AA04-46CE57ABABA9 (Friendly Name: 5f9409a8-cdb9-4484-b9fe-0c5b5ee9d6c1) successfully connected to port BB7CAF40-0624-4F64-9D8D-CAA909094E03 (Friendly Name: 5f9409a8-cdb9-4484-b9fe-0c5b5ee9d6c1) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083108Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8321824n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-3955157335-1178650849-1167304872-57380750011/23/2021 2:20:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EBBEE957-C8E1-4640-A8A8-93458C9B3322--CC93FC8F-BB54-464C-AA04-46CE57ABABA9 (Friendly Name: ).2330400-92233720368547758083107Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8321824n-h1-714676-12.cbci-714676-12.local11/23/2021 2:20:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6F8216F1-8975-426E-97AE-859EFBC60016--C5C8D43A-50DE-4407-ABAA-CC1448971437 (Friendly Name: ec0745ac-c0de-41bb-aff9-37a0e5d81b71).2330400-92233720368547758083106Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45643980n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1870796529-1114540405-2659561111-36914969111/23/2021 2:20:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6F8216F1-8975-426E-97AE-859EFBC60016--C5C8D43A-50DE-4407-ABAA-CC1448971437 successfully disconnected from port .2340400-92233720368547758083105Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45643980n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1870796529-1114540405-2659561111-36914969111/23/2021 2:20:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Status 0x00001069 determining that device interface \\?\{8e7bd593-6e6c-4c52-86a6-77175494dd8e}#MsVhdHba#1&3030e83&0&01#{2accfe60-c130-11d2-b082-00a0c91efb8b} does not support iSCSI WMI interfaces. If this device is not an iSCSI HBA then this error can be ignored. 108030360287970189639683104MSiSCSISystemn-h1-714676-12.cbci-714676-12.local11/23/2021 2:20:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8C8E6A05-C656-4857-8137-54DA3F65CA34--C94F3C5F-149F-4AED-9C4D-76859AAE9455 (Friendly Name: e8e4c998-92a6-4ca2-9934-1e7d37decb87) successfully connected to port 4DDD0D10-6E2E-438E-B535-18B35C682901 (Friendly Name: e8e4c998-92a6-4ca2-9934-1e7d37decb87) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083103Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34522560n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-2358143493-1213711958-3662952321-88567942311/23/2021 2:20:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 8C8E6A05-C656-4857-8137-54DA3F65CA34--C94F3C5F-149F-4AED-9C4D-76859AAE9455 (Friendly Name: ).2330400-92233720368547758083102Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34522560n-h1-714676-12.cbci-714676-12.local11/23/2021 2:20:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 752173DE-660E-4006-9E03-BE5E9F359540--A4704CBB-471A-4E42-BF83-BE15033E2E34 (Friendly Name: 515adfe2-4901-4cba-bf44-bc617e2fdbac) successfully connected to port 85E1BDE7-32E5-4164-9949-1019CC7B8B4B (Friendly Name: 515adfe2-4901-4cba-bf44-bc617e2fdbac) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083101Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42161580n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1965126622-1074161166-1589511070-108352041511/23/2021 2:19:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 752173DE-660E-4006-9E03-BE5E9F359540--A4704CBB-471A-4E42-BF83-BE15033E2E34 (Friendly Name: ).2330400-92233720368547758083100Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42161580n-h1-714676-12.cbci-714676-12.local11/23/2021 2:19:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118403099Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.local11/23/2021 2:19:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118403098Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.local11/23/2021 2:19:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6F8216F1-8975-426E-97AE-859EFBC60016--C5C8D43A-50DE-4407-ABAA-CC1448971437 (Friendly Name: ec0745ac-c0de-41bb-aff9-37a0e5d81b71) successfully connected to port B3F58F57-7232-4C22-8EC6-22F1E6020960 (Friendly Name: ec0745ac-c0de-41bb-aff9-37a0e5d81b71) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758083097Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45643980n-h1-714676-12.cbci-714676-12.localS-1-5-83-1-1870796529-1114540405-2659561111-36914969111/23/2021 2:19:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6F8216F1-8975-426E-97AE-859EFBC60016--C5C8D43A-50DE-4407-ABAA-CC1448971437 (Friendly Name: ).2330400-92233720368547758083096Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45643980n-h1-714676-12.cbci-714676-12.local11/23/2021 2:19:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403095Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.local11/23/2021 2:19:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403094Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.local11/23/2021 2:19:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403093Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:19:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Biometric Service service entered the stopped state.7036016384400-91873432398358118403092Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:19:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403091Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:18:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the stopped state.7036016384400-91873432398358118403090Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:18:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118403089Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:18:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118403088Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:18:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403087Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:18:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403086Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:18:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Downloaded Maps Manager service entered the stopped state.7036016384400-91873432398358118403085Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:17:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the running state.7036016384400-91873432398358118403084Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:17:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403083Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:17:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the running state.7036016384400-91873432398358118403082Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 2:17:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Downloaded Maps Manager service entered the running state.7036016384400-91873432398358118403081Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 2:17:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the running state.7036016384400-91873432398358118403080Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 2:17:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the running state.7036016384400-91873432398358118403079Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 2:17:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118403078Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:17:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The neutron-hyperv-agent service entered the running state.7036016384400-91873432398358118403077Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:16:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user CBCI-714676-12\administrator SID (S-1-5-21-2959325710-1739916634-2978920083-500) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403076Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761008n-h1-714676-12.cbci-714676-12.localS-1-5-21-2959325710-1739916634-2978920083-50011/23/2021 2:16:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the neutron-hyperv-agent service was changed from demand start to auto start.7040016384400-91873432398358118403075Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.localS-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:16:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nova-compute service entered the running state.7036016384400-91873432398358118403074Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:16:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user CBCI-714676-12\administrator SID (S-1-5-21-2959325710-1739916634-2978920083-500) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403073Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761008n-h1-714676-12.cbci-714676-12.localS-1-5-21-2959325710-1739916634-2978920083-50011/23/2021 2:16:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nova-compute service was changed from demand start to auto start.7040016384400-91873432398358118403072Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.localS-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:16:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the stopped state.7036016384400-91873432398358118403071Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:16:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403070Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:16:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083069Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14523480n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:16:24 AMb48d62ea-a632-45fa-8df1-31157a9e2f0bsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403068Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:16:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083067Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14523480n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:16:14 AMaa6e4ebe-fb3d-49e8-b438-1df01f760340systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source VM IC Time Synchronization Provider.350400-92233720368547758083066Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem1081512n-h1-714676-12.cbci-714676-12.localS-1-5-1911/23/2021 2:16:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the stopped state.7036016384400-91873432398358118403065Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-714676-12.cbci-714676-12.local11/23/2021 2:16:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the stopped state.7036016384400-91873432398358118403064Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:16:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639683063Virtual Disk ServiceSystemn-h1-714676-12.cbci-714676-12.local11/23/2021 2:16:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the running state.7036016384400-91873432398358118403062Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639683061Virtual Disk ServiceSystemn-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from n-ad-714676-12.cbci-714676-12.local (ntp.d|0.0.0.0:123->10.222.0.48:123).370400-92233720368547758083060Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem1081176n-h1-714676-12.cbci-714676-12.localS-1-5-1911/23/2021 2:15:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118403059Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\cloudbase-init SID (S-1-5-21-3442783130-122506643-1574047039-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403058Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9762644n-h1-714676-12.cbci-714676-12.localS-1-5-21-3442783130-122506643-1574047039-100011/23/2021 2:15:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system failed to register pointer (PTR) resource records (RRs) for network adapter with settings: Adapter Name : {CC605B32-FE79-41F4-88BF-AD446E4FB146} Host Name : n-h1-714676-12 Adapter-specific Domain Suffix : cbci-714676-12.local DNS server list : 10.222.0.48, 8.8.8.8, 4.4.4.4 Sent update to server : <?> IP Address : 10.222.0.47 The reason the system could not register these RRs during the update request was because of a system problem. You can manually retry DNS registration of the network adapter and its settings by typing 'ipconfig /registerdns' at the command prompt. If problems still persist, contact your DNS server or network systems administrator. See event details for specific error code information.8014041028046116860184273879043057Microsoft-Windows-DNS-Client1c95126e-7eea-49a9-a3fe-a378b03ddb4dSystem11281920n-h1-714676-12.cbci-714676-12.localS-1-5-2011/23/2021 2:15:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403056Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083055Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14523480n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:51 AM6a2b2f1a-97ab-4444-a1a8-6db4f87e91d4systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118403054Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wuauserv service entered the running state.7036016384400-91873432398358118403053Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmcompute service entered the running state.7036016384400-91873432398358118403052Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The swprv service entered the running state.7036016384400-91873432398358118403051Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the stopped state.7036016384400-91873432398358118403050Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800604n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403049Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800604n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083048Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14522856n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:50 AMf7c7828a-7c1a-43dc-9af3-12f1005bc6b9systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The firewall exception to allow Internet Storage Name Server (iSNS) client functionality is not enabled. iSNS client functionality is not available.121030360287970189639683047MSiSCSISystemn-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wlidsvc service entered the running state.7036016384400-91873432398358118403046Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800868n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403045Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761352n-h1-714676-12.cbci-714676-12.localS-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:15:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the stopped state.7036016384400-91873432398358118403044Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800604n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MSiSCSI service entered the running state.7036016384400-91873432398358118403043Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800548n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981443042Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem432n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the running state.7036016384400-91873432398358118403041Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118403040Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800804n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\cloudbase-init SID (S-1-5-21-3442783130-122506643-1574047039-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403039Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761352n-h1-714676-12.cbci-714676-12.localS-1-5-21-3442783130-122506643-1574047039-100011/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118403038Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800604n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118403037Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800548n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981443036Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem432n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118403035Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800604n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:10.222.0.47 has been brought up.42000400-92233720368547758083034Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System14522232n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118403033Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800548n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118403032Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001076n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118403031Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001076n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118403030Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001076n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118403029Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800604n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The KeyIso service entered the running state.7036016384400-91873432398358118403028Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118403027Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118403026Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800544n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118403025Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800544n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118403024Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800544n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118403023Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800544n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118403022Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001236n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118403021Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800548n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118403020Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118403019Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001240n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118403018Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118403017Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001288n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403016Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800888n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118403015Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800544n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the running state.7036016384400-91873432398358118403014Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001240n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SessionEnv service entered the running state.7036016384400-91873432398358118403013Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800544n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKEEXT service entered the running state.7036016384400-91873432398358118403012Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001240n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Netlogon service entered the running state.7036016384400-91873432398358118403011Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639683010Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A new self signed certificate to be used for RD Session Host Server authentication on SSL connections was generated. The name on this certificate is n-h1-714676-12.cbci-714676-12.local. The SHA1 hash of the certificate is in the event data.1056049152400360287970189639683009Microsoft-Windows-TerminalServices-RemoteConnectionManagerc76baa63-ae81-421c-b425-340b4b24157fSystem00n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118403008Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001240n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CertPropSvc service entered the running state.7036016384400-91873432398358118403007Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118403006Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001240n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118403005Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001240n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118403004Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001240n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118403003Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118403002Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UmRdpService service entered the running state.7036016384400-91873432398358118403001Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118403000Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001240n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118402999Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001232n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PolicyAgent service entered the running state.7036016384400-91873432398358118402998Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118402997Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is now operational.230410160-92233720368547758082996Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4500n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082995Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4500n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082994Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4500n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118402993Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402992Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402991Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402990Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcbService service entered the running state.7036016384400-91873432398358118402989Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402988Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the running state.7036016384400-91873432398358118402987Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402986Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402985Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402984Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001096n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402983Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001096n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402982Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001096n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402981Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001096n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402980Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001096n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402979Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402978Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402977Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442976Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem432n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442975Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem432n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442974Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem432n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402973Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402972Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522971Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System10281300n-h1-714676-12.cbci-714676-12.localS-1-5-1911/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?11?-?23T02:15:45.176000000Z from ?2021?-?11?-?23T02:15:45.434340900Z. Change Reason: An application or system component changed the time.11450-92233720368547757922970Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10281304n-h1-714676-12.cbci-714676-12.localS-1-5-1911/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402969Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001076n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402968Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001280n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402967Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001276n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522966Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem10281124n-h1-714676-12.cbci-714676-12.localS-1-5-1911/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TermService service entered the running state.7036016384400-91873432398358118402965Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800544n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402964Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800544n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402963Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800544n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402962Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402961Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402960Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402959Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402958Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402957Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402956Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402955Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402954Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800892n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082953Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem816820n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:44 AM00b2b071-e010-0005-73b0-b20010e0d701systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042952Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem688692n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082951Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is now operational.230410160-92233720368547758082950Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4224n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082949Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4224n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is no longer operational.240410170-92233720368547758082948Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4224n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Protocol NIC /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully bound to port 14E3C264-3B65-4657-8DA6-7C9FADCDD18A (Friendly Name: br-data_External) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).170410120-92233720368547758082947Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4224n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully connected to port 14E3C264-3B65-4657-8DA6-7C9FADCDD18A (Friendly Name: br-data_External) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758082946Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4224n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully updated NIC NDIS QoS with Miniport NIC /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: Microsoft Hyper-V Network Adapter #2)1910400-92233720368547758082945Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4224n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: ).2330400-92233720368547758082944Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4224n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082943Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4224n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082942Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082941Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082940Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082939Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4360n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082938Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4360n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082937Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4360n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082936Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4360n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082935Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4360n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082934Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4360n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082933Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4224n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082932Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
If Digest support selected for iSCSI Session, Will use Processor support for Digest computation.671638440360287970189639682931iScsiPrtSystemn-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16 (Friendly Name: br-data) successfully initialized.90410050-92233720368547758082930Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4360n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16 (Friendly Name: br-data) successfully connected to port 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16 (Friendly Name: br-data) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758082929Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4360n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16 (Friendly Name: br-data).2330400-92233720368547758082928Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4360n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802927Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802926Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4224n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442925Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682924VfpExtSystemn-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442923Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume C: (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062922Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4224n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442921Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442920Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442919Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442918Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442917Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442916Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082915Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082914Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082913Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082912Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082911Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082910Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2021?-?11?-?23T02:15:36.497727900Z.120410-92233720368547756802909Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48n-h1-714676-12.cbci-714676-12.localS-1-5-1811/23/2021 2:15:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2021?-?11?-?23T02:15:29.347741400Z.130420-92233720368547756802908Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4376n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162907Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System684688n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service entered the stopped state.7036016384400-91873432398358118402906Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964220n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system uptime is 9 seconds.60133276840360287970189639682905EventLogSystemn-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682904EventLogSystemn-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682903EventLogSystemn-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Initiator Service service entered the stopped state.7036016384400-91873432398358118402902Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964220n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services service entered the stopped state.7036016384400-91873432398358118402901Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964220n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402900Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964220n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402899Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964220n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402898Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964220n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402897Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964220n-h1-714676-12.cbci-714676-12.local11/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402896Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964220n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the stopped state.7036016384400-91873432398358118402895Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964220n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKE and AuthIP IPsec Keying Modules service entered the stopped state.7036016384400-91873432398358118402894Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964220n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402893Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964220n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service entered the stopped state.7036016384400-91873432398358118402892Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964220n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402891Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964220n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402890Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402889Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the stopped state.7036016384400-91873432398358118402888Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402887Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402886Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the stopped state.7036016384400-91873432398358118402885Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Software Shadow Copy Provider service entered the stopped state.7036016384400-91873432398358118402884Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402883Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522882Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem14161508n-h1-714676-12S-1-5-1911/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IPsec Policy Agent service entered the stopped state.7036016384400-91873432398358118402881Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic System Host service entered the stopped state.7036016384400-91873432398358118402880Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402879Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964860n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402878Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964760n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services UserMode Port Redirector service entered the stopped state.7036016384400-91873432398358118402877Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964860n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Install Service service entered the stopped state.7036016384400-91873432398358118402876Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964840n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402875Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964056n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522874Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System14161572n-h1-714676-12S-1-5-1911/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?11?-?23T02:15:27.738000000Z from ?2021?-?11?-?23T02:15:27.751910300Z. Change Reason: An application or system component changed the time.11450-92233720368547757922873Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14241512n-h1-714676-12S-1-5-1911/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402872Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964896n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HV Host Service service entered the stopped state.7036016384400-91873432398358118402871Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962992n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402870Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682869EventLogSystemn-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is not listening for WS-Management requests. User Action If you did not intentionally stop the service, use the following command to see the WinRM configuration: winrm enumerate winrm/config/listener1014907300360287970189639682868Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the stopped state.7036016384400-91873432398358118402867Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402866Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402865Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402864Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402863Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h1-714676-1211/23/2021 2:15:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\system32\shutdown.exe (N-H1-714676-12) has initiated the restart of computer N-H1-714676-12 on behalf of user N-H1-714676-12\Admin for the following reason: No title for this reason could be found Reason Code: 0x800000ff Shutdown Type: restart Comment: Reboot initiated by Ansible1074032768400-91873432398358118402862User32b0aa8734-56f7-41cc-b2f4-de228e98b946System588748n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:15:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402861Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:15:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Netlogon service entered the running state.7036016384400-91873432398358118402860Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 2:15:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Connectivity Assistant service entered the stopped state.7036016384400-91873432398358118402859Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 2:15:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The machine n-h1-714676-12 successfully joined the domain cbci-714676-12.local.40960400-92233720368547758082858NetJoin9741fd4e-3757-479f-a3c6-fc49f6d5edd0System13201208n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:15:23 AM00000000-0000-0000-0100-000000000000systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
This computer has been successfully joined to domain 'cbci-714676-12.local'.3260040360287970189639682857WorkstationSystemn-h1-714676-1211/23/2021 2:15:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402856Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:15:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402855Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:15:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402854Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:15:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402853Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:15:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402852Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 2:15:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402851Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 2:11:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402850Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 2:10:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402849Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 2:10:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402848Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 2:03:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402847Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 2:02:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402846Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 2:02:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The firewall exception to allow Internet Storage Name Server (iSNS) client functionality is not enabled. iSNS client functionality is not available.121030360287970189639682845MSiSCSISystemn-h1-714676-1211/23/2021 2:01:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Initiator Service service entered the running state.7036016384400-91873432398358118402844Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 2:01:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118402843Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 2:01:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the running state.7036016384400-91873432398358118402842Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 2:01:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
If Digest support selected for iSCSI Session, Will use Processor support for Digest computation.671638440360287970189639682841iScsiPrtSystemn-h1-714676-1211/23/2021 2:01:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118402840Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 2:01:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft iSCSI Initiator Service service was changed from demand start to auto start.7040016384400-91873432398358118402839Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:01:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402838Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:01:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402837Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:01:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402836Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:00:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402835Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:00:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402834Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:00:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402833Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:00:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402832Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:00:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402831Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:00:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402830Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 2:00:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402829Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:59:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402828Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:59:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402827Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:58:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402826Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:58:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402825Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:58:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402824Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 1:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402823Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 1:56:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402822Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:55:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402821Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:55:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402820Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:55:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402819Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:55:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402818Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:54:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402817Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:54:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402816Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:54:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402815Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:54:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402814Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:54:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402813Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:54:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402812Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:54:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402811Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:53:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402810Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:53:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Installer service entered the stopped state.7036016384400-91873432398358118402809Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:52:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402808Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:51:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118402807Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:51:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402806Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:50:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118402805Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:50:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118402804Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:50:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Registry service entered the stopped state.7036016384400-91873432398358118402803Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:50:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The App Readiness service entered the stopped state.7036016384400-91873432398358118402802Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:50:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402801Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:49:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402800Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:49:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402799Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:49:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402798Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:49:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402797Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:48:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402796Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:48:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the running state.7036016384400-91873432398358118402795Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402794Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:47:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402793Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:47:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402792Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:47:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402791Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402790Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:47:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402789Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402788Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:47:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402787Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:47:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402786Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:47:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402785Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402784Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:47:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Installer service entered the running state.7036016384400-91873432398358118402783Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:47:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402782Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:47:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402781Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:47:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402780Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:46:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402779Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:46:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the stopped state.7036016384400-91873432398358118402778Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:46:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402777Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:46:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402776Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:46:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402775Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:46:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402774Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:46:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402773Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:46:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118402772Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:46:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402771Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:46:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402770Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:46:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402769Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:46:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402768Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 1:45:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402767Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 1:45:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402766Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 1:44:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402765Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:44:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402764Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:44:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402763Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:44:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402762Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:44:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402761Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:44:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402760Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:44:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402759Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 1:44:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402758Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:44:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402757Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 1:44:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118402756Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 1:44:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402755Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:44:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).370400-92233720368547758082754Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem1424600n-h1-714676-12S-1-5-1911/23/2021 1:43:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402753Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521576n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:43:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushsvc service entered the stopped state.7036016384400-91873432398358118402752Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 1:43:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402751Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem952996n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:43:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402750Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:43:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).370400-92233720368547758082749Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14241528n-h1-714676-12S-1-5-1911/23/2021 1:43:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).370400-92233720368547758082748Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14241640n-h1-714676-12S-1-5-1911/23/2021 1:43:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402747Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521008n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:43:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).370400-92233720368547758082746Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14243428n-h1-714676-12S-1-5-1911/23/2021 1:43:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully connected to port 14E3C264-3B65-4657-8DA6-7C9FADCDD18A (Friendly Name: br-data_External) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758082745Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24322736n-h1-714676-12S-1-5-1811/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is now operational.230410160-92233720368547758082744Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6122964n-h1-714676-1211/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082743Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem6122964n-h1-714676-12S-1-5-1811/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is no longer operational.240410170-92233720368547758082742Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6122964n-h1-714676-1211/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is no longer operational.240410170-92233720368547758082741Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6122964n-h1-714676-1211/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Protocol NIC /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully bound to port (Friendly Name: ) on switch (Friendly Name: ).170410120-92233720368547758082740Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6122964n-h1-714676-12S-1-5-1811/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully updated NIC NDIS QoS with Miniport NIC /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: Microsoft Hyper-V Network Adapter #2)1910400-92233720368547758082739Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6122964n-h1-714676-1211/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic /DEVICE/{A8FCFC1F-CCB4-471A-AD86-C9B243CF838E} (Friendly Name: ).2330400-92233720368547758082738Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6122964n-h1-714676-1211/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082737Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem6122964n-h1-714676-12S-1-5-1811/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082736Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem43296n-h1-714676-12S-1-5-1811/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082735Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4508n-h1-714676-12S-1-5-1811/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082734Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem14161496n-h1-714676-1211/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082733Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4508n-h1-714676-12S-1-5-1811/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' is halting60410030-92233720368547758082732Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4376n-h1-714676-12S-1-5-1811/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal is no longer active.42010400-92233720368547758082731Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System6123040n-h1-714676-12S-1-5-1811/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082730Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4376n-h1-714676-12S-1-5-1811/23/2021 1:43:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16 (Friendly Name: br-data) successfully initialized.90410050-92233720368547758082729Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24322236n-h1-714676-12S-1-5-1811/23/2021 1:43:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16 (Friendly Name: br-data) successfully connected to port 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16 (Friendly Name: br-data) on switch 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16(Friendly Name: br-data).2320400-92233720368547758082728Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24322236n-h1-714676-12S-1-5-1811/23/2021 1:43:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 8D3503ED-0EED-4CF5-AB6A-0B73FBF89F16 (Friendly Name: br-data).2330400-92233720368547758082727Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24322236n-h1-714676-1211/23/2021 1:43:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver wvms_mp.inf_amd64_e1065995a017ab1b\wvms_mp.inf for Device Instance ID ROOT\VMS_VSMP\0000 with the following status: 0x0.200010470050-92233720368547758082726Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System40841168n-h1-714676-12S-1-5-1811/23/2021 1:43:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: VMSMP Service File Name: \SystemRoot\System32\drivers\vmswitch.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: 7045016384400-91873432398358118402725Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-12S-1-5-1811/23/2021 1:43:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118402724Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 1:43:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118402723Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:43:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402722Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-2011/23/2021 1:43:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402721Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:43:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the neutron-hyperv-agent service was changed from auto start to demand start.7040016384400-91873432398358118402720Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961684n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:43:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: neutron-hyperv-agent Service File Name: c:\openstack\bin\OpenStackService.exe neutron-hyperv-agent c:\python37\scripts\neutron-hyperv-agent.exe --config-file c:\openstack\etc\neutron-hyperv-agent.conf Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem7045016384400-91873432398358118402719Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961684n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:43:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nova-compute service was changed from auto start to demand start.7040016384400-91873432398358118402718Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:43:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402717Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-2011/23/2021 1:43:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: nova-compute Service File Name: c:\openstack\bin\OpenStackService.exe nova-compute c:\python37\scripts\nova-compute.exe --config-file c:\openstack\etc\nova.conf Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem7045016384400-91873432398358118402716Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:43:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402715Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:43:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKE and AuthIP IPsec Keying Modules service entered the running state.7036016384400-91873432398358118402714Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961624n-h1-714676-1211/23/2021 1:43:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the IKE and AuthIP IPsec Keying Modules service was changed from demand start to auto start.7040016384400-91873432398358118402713Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961624n-h1-714676-12S-1-5-1811/23/2021 1:43:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402712Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:43:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Biometric Service service entered the stopped state.7036016384400-91873432398358118402711Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:43:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402710Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:43:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118402709Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:43:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118402708Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:43:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402707Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:43:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402706Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:43:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402705Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:42:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118402704Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:42:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402703Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:42:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402702Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:42:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MapsBroker service entered the stopped state.7036016384400-91873432398358118402701Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:42:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118402700Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:42:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402699Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:42:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UALSVC service entered the running state.7036016384400-91873432398358118402698Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:42:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the running state.7036016384400-91873432398358118402697Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:42:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MapsBroker service entered the running state.7036016384400-91873432398358118402696Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:42:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WdiSystemHost service entered the running state.7036016384400-91873432398358118402695Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:42:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DPS service entered the running state.7036016384400-91873432398358118402694Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:42:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the running state.7036016384400-91873432398358118402693Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:42:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402692Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:41:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?11?-?23T01:41:06.969000000Z from ?2021?-?11?-?23T01:41:06.997371100Z. Change Reason: An application or system component changed the time.11450-92233720368547757922691Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14241512n-h1-714676-12S-1-5-1911/23/2021 1:41:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402690Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:41:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the stopped state.7036016384400-91873432398358118402689Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PolicyAgent service entered the running state.7036016384400-91873432398358118402688Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:40:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SSL Certificate Settings created by an admin process for endpoint : 0.0.0.0:5986 .15301032768300360287970189639682687Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System41368n-h1-714676-1211/23/2021 1:40:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Reservation for namespace identified by URL prefix https://+:5986/wsman/ was successfully added.15007016384400360287970189639682686Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System41256n-h1-714676-1211/23/2021 1:40:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Reservation for namespace identified by URL prefix https://+:5986/wsman/ was successfully deleted.15008016384400360287970189639682685Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System4188n-h1-714676-1211/23/2021 1:40:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the stopped state.7036016384400-91873432398358118402684Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:40:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639682683Virtual Disk ServiceSystemn-h1-714676-1211/23/2021 1:40:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the running state.7036016384400-91873432398358118402682Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639682681Virtual Disk ServiceSystemn-h1-714676-1211/23/2021 1:40:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\Admin SID (S-1-5-21-3442783130-122506643-1574047039-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402680Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100111/23/2021 1:40:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TBS device identifier has been generated.12820400-92233720368547758082679Microsoft-Windows-TPM-WMI7d5387b0-cbe0-11da-a94d-0800200c9a66System24403912n-h1-714676-12S-1-5-1811/23/2021 1:40:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).350400-92233720368547758082678Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14241640n-h1-714676-12S-1-5-1911/23/2021 1:40:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\cloudbase-init SID (S-1-5-21-3442783130-122506643-1574047039-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402677Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100011/23/2021 1:40:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrustedInstaller service entered the running state.7036016384400-91873432398358118402676Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118402675Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 1 Group Policy objects were detected and applied.15020401-92233720368547758082674Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System6123644n-h1-714676-12S-1-5-1811/23/2021 1:40:17 AM983abe2d-b262-4b59-ae87-4c266cc61832systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the stopped state.7036016384400-91873432398358118402673Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:40:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the running state.7036016384400-91873432398358118402672Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:40:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The swprv service entered the running state.7036016384400-91873432398358118402671Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961632n-h1-714676-1211/23/2021 1:40:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-714676-12\cloudbase-init SID (S-1-5-21-3442783130-122506643-1574047039-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402670Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521844n-h1-714676-12S-1-5-21-3442783130-122506643-1574047039-100011/23/2021 1:40:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:192.168.0.37 has been brought up.42000400-92233720368547758082669Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System6122608n-h1-714676-12S-1-5-1811/23/2021 1:40:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:10.222.0.47 has been brought up.42000400-92233720368547758082668Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System6122608n-h1-714676-12S-1-5-1811/23/2021 1:40:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wuauserv service entered the running state.7036016384400-91873432398358118402667Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961632n-h1-714676-1211/23/2021 1:40:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LicenseManager service entered the running state.7036016384400-91873432398358118402666Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961632n-h1-714676-1211/23/2021 1:40:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
This event triggers the TBS device identifier generation.12810400-92233720368547758082665Microsoft-Windows-TPM-WMI7d5387b0-cbe0-11da-a94d-0800200c9a66System6122660n-h1-714676-12S-1-5-1811/23/2021 1:40:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A new self signed certificate to be used for RD Session Host Server authentication on SSL connections was generated. The name on this certificate is n-h1-714676-12. The SHA1 hash of the certificate is in the event data.1056049152400360287970189639682664Microsoft-Windows-TerminalServices-RemoteConnectionManagerc76baa63-ae81-421c-b425-340b4b24157fSystem00n-h1-714676-1211/23/2021 1:40:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SessionEnv service entered the running state.7036016384400-91873432398358118402663Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961632n-h1-714676-1211/23/2021 1:40:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the running state.7036016384400-91873432398358118402662Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961632n-h1-714676-1211/23/2021 1:40:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UmRdpService service entered the running state.7036016384400-91873432398358118402661Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the cloudbase-init service was changed from demand start to auto start.7040016384400-91873432398358118402660Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-12S-1-5-1811/23/2021 1:40:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TermService service entered the running state.7036016384400-91873432398358118402659Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:40:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DmEnrollmentSvc service entered the stopped state.7036016384400-91873432398358118402658Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:40:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DmEnrollmentSvc service entered the running state.7036016384400-91873432398358118402657Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:40:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The KeyIso service entered the running state.7036016384400-91873432398358118402656Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:40:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).370400-92233720368547758082655Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14241504n-h1-714676-12S-1-5-1911/23/2021 1:40:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ClipSVC service entered the running state.7036016384400-91873432398358118402654Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961632n-h1-714676-1211/23/2021 1:40:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmcompute service entered the running state.7036016384400-91873432398358118402653Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961632n-h1-714676-1211/23/2021 1:40:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wlidsvc service entered the running state.7036016384400-91873432398358118402652Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961632n-h1-714676-1211/23/2021 1:40:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442651Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4228n-h1-714676-12S-1-5-1811/23/2021 1:40:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981442650Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem41368n-h1-714676-12S-1-5-1811/23/2021 1:40:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118402649Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:40:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118402648Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:40:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118402647Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796800n-h1-714676-1211/23/2021 1:40:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118402646Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961632n-h1-714676-1211/23/2021 1:40:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118402645Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961632n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the running state.7036016384400-91873432398358118402644Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118402643Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118402642Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118402641Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118402640Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118402639Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118402638Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118402637Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118402636Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796868n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118402635Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118402634Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118402633Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118402632Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402631Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118402630Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118402629Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118402628Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118402627Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961656n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118402626Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961656n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118402625Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961656n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118402624Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961656n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402623Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639682622Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118402621Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402620Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402619Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402618Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402617Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402616Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402615Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961628n-h1-714676-1211/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402614Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402613Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961656n-h1-714676-1211/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442612Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4136n-h1-714676-12S-1-5-1811/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402611Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442610Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4136n-h1-714676-12S-1-5-1811/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442609Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4136n-h1-714676-12S-1-5-1811/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcbService service entered the running state.7036016384400-91873432398358118402608Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h1-714676-1211/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?11?-?23T01:40:05.394000000Z from ?2021?-?11?-?23T01:40:06.632156800Z. Change Reason: An application or system component changed the time.11450-92233720368547757922607Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14161920n-h1-714676-12S-1-5-1911/23/2021 1:40:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402606Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402605Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402604Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppReadiness service entered the running state.7036016384400-91873432398358118402603Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the running state.7036016384400-91873432398358118402602Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DsmSvc service entered the running state.7036016384400-91873432398358118402601Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961652n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402600Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961460n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402599Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961460n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118402598Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961460n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402597Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402596Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961668n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402595Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961568n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402594Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961568n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522593Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System14161572n-h1-714676-12S-1-5-1911/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522592Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem14161508n-h1-714676-12S-1-5-1911/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118402591Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402590Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402589Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118402588Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h1-714676-1211/23/2021 1:40:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully logged OS information2004044000023059837467020492802587Microsoft-Windows-Setup75ebc33e-997f-49cf-b49f-ecc50184b75dSystem11641168n-h1-714676-12S-1-5-1811/23/2021 1:40:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoOS informationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118402586Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:39:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppXSvc service entered the running state.7036016384400-91873432398358118402585Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:39:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118402584Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:39:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushservice service entered the running state.7036016384400-91873432398358118402583Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h1-714676-1211/23/2021 1:39:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402582Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h1-714676-1211/23/2021 1:39:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118402581Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h1-714676-1211/23/2021 1:39:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DeviceInstall service entered the running state.7036016384400-91873432398358118402580Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h1-714676-1211/23/2021 1:39:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402579Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h1-714676-1211/23/2021 1:39:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402578Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h1-714676-1211/23/2021 1:39:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402577Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h1-714676-1211/23/2021 1:39:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402576Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:39:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402575Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:39:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402574Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:39:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402573Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:39:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402572Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h1-714676-1211/23/2021 1:39:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082571Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem808812n-h1-714676-12S-1-5-1811/23/2021 1:39:52 AMff30ba14-e00a-0005-19ba-30ff0ae0d701systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042570Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem684688n-h1-714676-12S-1-5-1811/23/2021 1:39:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082569Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384n-h1-714676-12S-1-5-1811/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082568Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188n-h1-714676-12S-1-5-1811/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082567Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384n-h1-714676-12S-1-5-1811/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082566Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188n-h1-714676-12S-1-5-1811/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082565Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h1-714676-1211/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082564Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h1-714676-1211/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082563Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4228n-h1-714676-12S-1-5-1811/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082562Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4228n-h1-714676-12S-1-5-1811/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082561Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4228n-h1-714676-12S-1-5-1811/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082560Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4228n-h1-714676-12S-1-5-1811/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082559Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4228n-h1-714676-12S-1-5-1811/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082558Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4228n-h1-714676-12S-1-5-1811/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082557Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188n-h1-714676-12S-1-5-1811/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082556Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384n-h1-714676-12S-1-5-1811/23/2021 1:39:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802555Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48n-h1-714676-1211/23/2021 1:39:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802554Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4188n-h1-714676-12S-1-5-1811/23/2021 1:39:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442553Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-714676-12S-1-5-1811/23/2021 1:39:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682552VfpExtSystemn-h1-714676-1211/23/2021 1:39:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442551Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-714676-12S-1-5-1811/23/2021 1:39:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume C: (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062550Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4228n-h1-714676-12S-1-5-1811/23/2021 1:39:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442549Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-714676-12S-1-5-1811/23/2021 1:39:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442548Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-714676-12S-1-5-1811/23/2021 1:39:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442547Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48n-h1-714676-12S-1-5-1811/23/2021 1:39:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442546Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-714676-12S-1-5-1811/23/2021 1:39:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442545Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-714676-12S-1-5-1811/23/2021 1:39:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442544Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-714676-12S-1-5-1811/23/2021 1:39:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082543Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-714676-12S-1-5-1811/23/2021 1:39:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082542Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-714676-12S-1-5-1811/23/2021 1:39:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082541Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-714676-12S-1-5-1811/23/2021 1:39:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082540Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-714676-12S-1-5-1811/23/2021 1:39:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082539Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-714676-12S-1-5-1811/23/2021 1:39:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082538Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-714676-12S-1-5-1811/23/2021 1:39:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2021?-?11?-?23T01:39:46.482145400Z.120410-92233720368547756802537Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48n-h1-714676-12S-1-5-1811/23/2021 1:39:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2021?-?11?-?23T01:39:38.591698300Z.130420-92233720368547756802536Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem42728n-h1-714676-1211/23/2021 1:39:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162535Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System692696n-h1-714676-1211/23/2021 1:39:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service entered the stopped state.7036016384400-91873432398358118402534Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368n-h1-714676-1211/23/2021 1:39:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402533Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368n-h1-714676-1211/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402532Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368n-h1-714676-1211/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402531Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368n-h1-714676-1211/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402530Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368n-h1-714676-1211/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402529Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368n-h1-714676-1211/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402528Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368n-h1-714676-1211/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402527Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368n-h1-714676-1211/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402526Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368n-h1-714676-1211/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402525Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368n-h1-714676-1211/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system uptime is 19 seconds.60133276840360287970189639682524EventLogSystemn-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682523EventLogSystemn-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682522EventLogSystemn-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetBIOS name and DNS host name of this machine have been changed from WIN-A7IMG6MI2HD to N-H1-714676-12.60113276840360287970189639682521EventLogSystemn-h1-714676-1211/23/2021 1:40:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402520Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368WIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402519Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368WIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402518Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368WIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402517Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368WIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402516Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368WIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522515Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem12841572WIN-5T344G8GM1HS-1-5-1911/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402514Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368WIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402513Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368WIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402512Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368WIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522511Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System12841660WIN-5T344G8GM1HS-1-5-1911/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?11?-?23T01:39:37.037000000Z from ?2021?-?11?-?23T01:39:37.041631900Z. Change Reason: An application or system component changed the time.11450-92233720368547757922510Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14762192WIN-5T344G8GM1HS-1-5-1911/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Install Service service entered the stopped state.7036016384400-91873432398358118402509Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041256WIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402508Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HV Host Service service entered the stopped state.7036016384400-91873432398358118402507Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042060WIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402506Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402505Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H11/23/2021 1:39:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402504Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H11/23/2021 1:39:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682503EventLogSystemWIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is not listening for WS-Management requests. User Action If you did not intentionally stop the service, use the following command to see the WinRM configuration: winrm enumerate winrm/config/listener1014907300360287970189639682502Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00WIN-5T344G8GM1H11/23/2021 1:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402501Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H11/23/2021 1:39:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402500Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:39:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402499Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:39:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\system32\winlogon.exe (WIN-5T344G8GM1H) has initiated the restart of computer WIN-A7IMG6MI2HD on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Upgrade (Planned) Reason Code: 0x80020003 Shutdown Type: restart Comment: 1074032768400-91873432398358118402498User32b0aa8734-56f7-41cc-b2f4-de228e98b946System604756WIN-5T344G8GM1HS-1-5-1811/23/2021 1:39:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtual Disk service entered the stopped state.7036016384400-91873432398358118402497Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:39:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639682496Virtual Disk ServiceSystemWIN-5T344G8GM1H11/23/2021 1:39:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtual Disk service entered the running state.7036016384400-91873432398358118402495Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:39:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639682494Virtual Disk ServiceSystemWIN-5T344G8GM1H11/23/2021 1:39:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402493Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:39:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \??\C:\windows\System32\SMI\Store\Machine\SCHEMA.DAT was reorganized with a starting size of 12853248 bytes and an ending size of 11681792 bytes.150400-92233720368547758082492Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11681172WIN-5T344G8GM1HS-1-5-1811/23/2021 1:39:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \??\C:\windows\System32\config\COMPONENTS was reorganized with a starting size of 71872512 bytes and an ending size of 56864768 bytes.150400-92233720368547758082491Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11681172WIN-5T344G8GM1HS-1-5-1811/23/2021 1:39:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).350400-92233720368547758082490Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14762040WIN-5T344G8GM1HS-1-5-1911/23/2021 1:38:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082489Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442932WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.MiracastView_6.3.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082488Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442932WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082487Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442932WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameCallableUI_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082486Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442932WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.14393.1715_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082485Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442932WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082484Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442932WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082483Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442932WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.14393.1066_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082482Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442932WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.AssignedAccessLockApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082481Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442932WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082480Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442932WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.LockApp_10.0.14393.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082479Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442932WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BioEnrollment_10.0.14393.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082478Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442932WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AccountsControl_10.0.14393.1715_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082477Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442932WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082476Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10442912WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\AppCompat\Programs\Amcache.hve was cleared updating 629 keys and creating 196 modified pages.160400-92233720368547758082475Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem20962464WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver msports.inf_amd64_280f71b0b084cc3b\msports.inf for Device Instance ID ACPI\PNP0501\1 with the following status: 0x0.200010470050-92233720368547758082474Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25322588WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serenum for Device Instance ID ACPI\PNP0501\1 with the following status: 0.200030470050-92233720368547758082473Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25322588WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serial for Device Instance ID ACPI\PNP0501\1 with the following status: 0.200030470050-92233720368547758082472Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25322588WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver msports.inf_amd64_280f71b0b084cc3b\msports.inf for Device Instance ID ACPI\PNP0501\2 with the following status: 0x0.200010470050-92233720368547758082471Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25402592WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serenum for Device Instance ID ACPI\PNP0501\2 with the following status: 0.200030470050-92233720368547758082470Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25402592WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serial for Device Instance ID ACPI\PNP0501\2 with the following status: 0.200030470050-92233720368547758082469Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25402592WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver wvmbusvideo.inf_amd64_1f06cc897822eef5\wvmbusvideo.inf for Device Instance ID VMBUS\{DA0A7802-E377-4AAC-8E77-0558EB1073F8}\{5620E0C7-8062-4DCE-AEB7-520C7EF76171} with the following status: 0x0.200010470050-92233720368547758082468Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25242584WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service HyperVideo for Device Instance ID VMBUS\{DA0A7802-E377-4AAC-8E77-0558EB1073F8}\{5620E0C7-8062-4DCE-AEB7-520C7EF76171} with the following status: 0.200030470050-92233720368547758082467Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25242584WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wlidsvc service entered the running state.7036016384400-91873432398358118402466Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H11/23/2021 1:38:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->40.119.148.38:123).370400-92233720368547758082465Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14762040WIN-5T344G8GM1HS-1-5-1911/23/2021 1:38:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmcompute service entered the running state.7036016384400-91873432398358118402464Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H11/23/2021 1:38:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442463Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem41072WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981442462Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4564WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118402461Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H11/23/2021 1:38:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the stopped state.7036016384400-91873432398358118402460Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H11/23/2021 1:38:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118402459Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041260WIN-5T344G8GM1H11/23/2021 1:38:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118402458Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804808WIN-5T344G8GM1H11/23/2021 1:38:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118402457Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041260WIN-5T344G8GM1H11/23/2021 1:38:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118402456Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041244WIN-5T344G8GM1H11/23/2021 1:38:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118402455Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118402454Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service terminated with the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.7023049152200-91873432398358118402453Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the stopped state.7036016384400-91873432398358118402452Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118402451Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118402450Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041392WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118402449Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041372WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118402448Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041372WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118402447Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041372WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118402446Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041368WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118402445Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118402444Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118402443Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639682442Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118402441Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118402440Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896WIN-5T344G8GM1H11/23/2021 1:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402439Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118402438Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118402437Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402436Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118402435Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service terminated with the following error: The device is not ready.7023049152200-91873432398358118402434Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the stopped state.7036016384400-91873432398358118402433Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118402432Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118402431Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118402430Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402429Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402428Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041372WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118402427Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041372WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118402426Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041248WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118402425Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402424Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402423Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402422Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522421Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System12841660WIN-5T344G8GM1HS-1-5-1911/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522420Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem12841572WIN-5T344G8GM1HS-1-5-1911/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402419Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402418Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402417Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118402416Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402415Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402414Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402413Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041364WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402412Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402411Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442410Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4564WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442409Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4564WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?11?-?23T01:38:40.237000000Z from ?2021?-?11?-?23T01:38:39.698572200Z. Change Reason: An application or system component changed the time.11450-92233720368547757922408Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem12841432WIN-5T344G8GM1HS-1-5-1911/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402407Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041380WIN-5T344G8GM1H11/23/2021 1:38:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442406Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4564WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402405Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041256WIN-5T344G8GM1H11/23/2021 1:38:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402404Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041256WIN-5T344G8GM1H11/23/2021 1:38:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402403Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041392WIN-5T344G8GM1H11/23/2021 1:38:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402402Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H11/23/2021 1:38:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402401Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DsmSvc service entered the running state.7036016384400-91873432398358118402400Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H11/23/2021 1:38:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 10 keys and creating 2 modified pages.160400-92233720368547758082399Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem912948WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402398Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118402397Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppXSvc service entered the running state.7036016384400-91873432398358118402396Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082395Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4472WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082394Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082393Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188WIN-5T344G8GM1H11/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082392Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118402391Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082390Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4236WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082389Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4584WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082388Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00WIN-5T344G8GM1H11/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082387Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4584WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushservice service entered the running state.7036016384400-91873432398358118402386Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402385Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118402384Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DeviceInstall service entered the running state.7036016384400-91873432398358118402383Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402382Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402381Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402380Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402379Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H11/23/2021 1:38:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402378Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402377Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402376Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402375Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H11/23/2021 1:38:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082374Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem820824WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:30 AMc4577646-e00a-0005-4a76-57c40ae0d701systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042373Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem692696WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Default\NTUSER.DAT was cleared updating 126 keys and creating 18 modified pages.160400-92233720368547758082372Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 628 keys and creating 85 modified pages.160400-92233720368547758082371Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Administrator\NTUSER.DAT was cleared updating 1935 keys and creating 116 modified pages.160400-92233720368547758082370Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 128 keys and creating 20 modified pages.160400-92233720368547758082369Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 137 keys and creating 21 modified pages.160400-92233720368547758082368Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 80 keys and creating 7 modified pages.160400-92233720368547758082367Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4548WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 87 keys and creating 5 modified pages.160400-92233720368547758082366Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4532WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 229 keys and creating 27 modified pages.160400-92233720368547758082365Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4544WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 78917632 bytes and an ending size of 74686464 bytes.150400-92233720368547758082364Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4536WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 82 keys and creating 1 modified pages.160400-92233720368547758082363Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem484488WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 5177344 bytes and an ending size of 5169152 bytes.150400-92233720368547758082362Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4236WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082361Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082360Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082359Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082358Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082357Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082356Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802355Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48WIN-5T344G8GM1H11/23/2021 1:38:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802354Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4468WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442353Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682352VfpExtSystemWIN-5T344G8GM1H11/23/2021 1:38:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442351Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume \\?\Volume{be07386b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062350Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4188WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442349Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442348Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442347Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442346Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442345Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442344Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082343Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082342Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082341Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082340Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082339Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082338Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2021?-?11?-?23T01:38:07.490962800Z.120410-92233720368547756802337Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48WIN-5T344G8GM1HS-1-5-1811/23/2021 1:38:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2018?-?01?-?19T09:48:14.082208700Z.130420-92233720368547756802336Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem42896WIN-5T344G8GM1H1/19/2018 9:48:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162335Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System520524WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service entered the stopped state.7036016384400-91873432398358118402334Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402333Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402332Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402331Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402330Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402329Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402328Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402327Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402326Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682325EventLogSystemWIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682324EventLogSystemWIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetBIOS name and DNS host name of this machine have been changed from WIN-5T344G8GM1H to WIN-A7IMG6MI2HD.60113276840360287970189639682323EventLogSystemWIN-5T344G8GM1H11/23/2021 1:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service entered the stopped state.7036016384400-91873432398358118402322Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402321Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the stopped state.7036016384400-91873432398358118402320Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402319Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services service entered the stopped state.7036016384400-91873432398358118402318Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Software Shadow Copy Provider service entered the stopped state.7036016384400-91873432398358118402317Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402316Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402315Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402314Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services UserMode Port Redirector service entered the stopped state.7036016384400-91873432398358118402313Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561100WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402312Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656416WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402311Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656416WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2018?-?01?-?19T09:48:13.152000000Z from ?2018?-?01?-?19T09:48:13.164762500Z. Change Reason: An application or system component changed the time.11450-92233720368547757922310Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem12442300WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Credential Manager service entered the stopped state.7036016384400-91873432398358118402309Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561080WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402308Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6562116WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402307Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561048WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522306Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem4361300WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522305Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System4361360WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402304Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402303Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402302Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402301Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402300Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402299Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
User Logoff Notification for Customer Experience Improvement Program7002041102023058781935857827842298Microsoft-Windows-Winlogondbe9b383-7cf3-4331-91cc-a3cb16a3b538System584916WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682297EventLogSystemWIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CDPUserSvc_24762 service entered the stopped state.7036016384400-91873432398358118402296Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Sync Host_24762 service entered the stopped state.7036016384400-91873432398358118402295Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402294Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem820972WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the stopped state.7036016384400-91873432398358118402293Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Configuration service entered the stopped state.7036016384400-91873432398358118402292Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\System32\Sysprep\Sysprep.exe (WIN-5T344G8GM1H) has initiated the shutdown of computer WIN-5T344G8GM1H on behalf of user WIN-5T344G8GM1H\Administrator for the following reason: No title for this reason could be found Reason Code: 0x40002 Shutdown Type: shutdown Comment: 1074032768400-91873432398358118402291User32b0aa8734-56f7-41cc-b2f4-de228e98b946System448464WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Process C:\Windows\System32\Sysprep\sysprep.exe (process ID:4012) reset policy scheme from {381B4222-F694-41F0-9685-FF5BB260DF2E} to {381B4222-F694-41F0-9685-FF5BB260DF2E}120410046116860184273879042290Microsoft-Windows-UserModePowerServicece8dee0b-d539-4000-b0f8-77bed049c590System764316WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the running state.7036016384400-91873432398358118402289Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402288Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402287Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)1340300-92233720368547758082286Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem12441320WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the running state.7036016384400-91873432398358118402285Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402284Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402283Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TCP/IP NetBIOS Helper service entered the stopped state.7036016384400-91873432398358118402282Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TCP/IP NetBIOS Helper service was successfully sent a stop control. The reason specified was: 0x40030011 [Operating System: Network Connectivity (Planned)] Comment: None7042016384400-91873432398358118402281Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport Teredo Tunneling Pseudo-Interface, {8A97E6D0-A2AF-48AE-8BC2-FFC865CC4DF6}, had event Network Interface deleted while PNP Device still exists. Note that this event is provided for informational purpose and might not be an error always (Eg: In case of vSwitch which was recently un-installed or a LBFO team was removed)10317022023058430092137103582280Microsoft-Windows-NDIScdead503-17f5-4a3e-b7ae-df8cc2902eb9System9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AM8a97e6d0-a2af-48ae-8bc2-ffc865cc4df6systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoPnPSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' is halting60410030-92233720368547758082279Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem41984WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport Microsoft Hyper-V Network Adapter #2, {518CDFA4-5492-4D9E-BEAA-908825A4A289}, had event Network Interface deleted while PNP Device still exists. Note that this event is provided for informational purpose and might not be an error always (Eg: In case of vSwitch which was recently un-installed or a LBFO team was removed)10317022023058430092137103582278Microsoft-Windows-NDIScdead503-17f5-4a3e-b7ae-df8cc2902eb9System9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AM518cdfa4-5492-4d9e-beaa-908825a4a289systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoPnPSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)1340300-92233720368547758082277Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem12441800WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.{518CDFA4-5492-4D9E-BEAA-908825A4A289} is no longer active.42010400-92233720368547758082276Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System9761376WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082275Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118402274Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft-Windows-Kernel-PnP/Configuration log file was cleared.104041040-92233720368547758082273Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the VIA StorX Storage RAID Controller Windows Driver service was changed from demand start to boot start.7040016384400-91873432398358118402272Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the vsmraid service was changed from demand start to boot start.7040016384400-91873432398358118402271Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Universal Flash Storage (UFS) Driver service was changed from demand start to boot start.7040016384400-91873432398358118402270Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Standard NVM Express Driver service was changed from demand start to boot start.7040016384400-91873432398358118402269Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the stexstor service was changed from demand start to boot start.7040016384400-91873432398358118402268Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SiSRaid4 service was changed from demand start to boot start.7040016384400-91873432398358118402267Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SiSRaid2 service was changed from demand start to boot start.7040016384400-91873432398358118402266Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Storage Class Memory Bus Driver service was changed from demand start to boot start.7040016384400-91873432398358118402265Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SBP-2 Transport/Protocol Bus Driver service was changed from demand start to boot start.7040016384400-91873432398358118402264Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic [FCoE] STOR Miniport Inbox Driver (wx64) service was changed from demand start to boot start.7040016384400-91873432398358118402263Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic iSCSI Miniport Inbox Driver service was changed from demand start to boot start.7040016384400-91873432398358118402262Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Fibre Channel STOR Miniport Inbox Driver (wx64) service was changed from demand start to boot start.7040016384400-91873432398358118402261Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the percsas3i service was changed from demand start to boot start.7040016384400-91873432398358118402260Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the percsas2i service was changed from demand start to boot start.7040016384400-91873432398358118402259Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the pcmcia service was changed from demand start to boot start.7040016384400-91873432398358118402258Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nvraid service was changed from demand start to boot start.7040016384400-91873432398358118402257Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nvstor service was changed from demand start to boot start.7040016384400-91873432398358118402256Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic 10 Gigabit Ethernet Adapter VBD service was changed from demand start to boot start.7040016384400-91873432398358118402255Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Network Adapter VBD service was changed from demand start to boot start.7040016384400-91873432398358118402254Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the mvumis service was changed from demand start to boot start.7040016384400-91873432398358118402253Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Standard SATA AHCI Driver service was changed from demand start to boot start.7040016384400-91873432398358118402252Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the pciide service was changed from demand start to boot start.7040016384400-91873432398358118402251Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasr service was changed from demand start to boot start.7040016384400-91873432398358118402250Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasas2i service was changed from demand start to boot start.7040016384400-91873432398358118402249Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasas service was changed from demand start to boot start.7040016384400-91873432398358118402248Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the isapnp service was changed from demand start to boot start.7040016384400-91873432398358118402247Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SSS service was changed from demand start to boot start.7040016384400-91873432398358118402246Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS3i service was changed from demand start to boot start.7040016384400-91873432398358118402245Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS2i service was changed from demand start to boot start.7040016384400-91873432398358118402244Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS service was changed from demand start to boot start.7040016384400-91873432398358118402243Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Intel RAID Controller Windows 7 service was changed from demand start to boot start.7040016384400-91873432398358118402242Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Intel(R) SATA RAID Controller Windows service was changed from demand start to boot start.7040016384400-91873432398358118402241Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the HpSAMD service was changed from demand start to boot start.7040016384400-91873432398358118402240Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the elxstor service was changed from demand start to boot start.7040016384400-91873432398358118402239Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the elxfcoe service was changed from demand start to boot start.7040016384400-91873432398358118402238Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols service was changed from demand start to boot start.7040016384400-91873432398358118402237Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the cht4iscsi service was changed from demand start to boot start.7040016384400-91873432398358118402236Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Offload iSCSI Driver service was changed from demand start to boot start.7040016384400-91873432398358118402235Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic FCoE Offload driver service was changed from demand start to boot start.7040016384400-91873432398358118402234Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the bfadfcoei service was changed from demand start to boot start.7040016384400-91873432398358118402233Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the bfadi service was changed from demand start to boot start.7040016384400-91873432398358118402232Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Adaptec SAS/SATA-II RAID Storport's Miniport Driver service was changed from demand start to boot start.7040016384400-91873432398358118402231Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdsbs service was changed from demand start to boot start.7040016384400-91873432398358118402230Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdxata service was changed from demand start to boot start.7040016384400-91873432398358118402229Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdsata service was changed from demand start to boot start.7040016384400-91873432398358118402228Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the ADP80XX service was changed from demand start to boot start.7040016384400-91873432398358118402227Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the 3ware service was changed from demand start to boot start.7040016384400-91873432398358118402226Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402225Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402224Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the stopped state.7036016384400-91873432398358118402223Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the stopped state.7036016384400-91873432398358118402222Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the running state.7036016384400-91873432398358118402221Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Setup log file was cleared.104041040-92233720368547758082220Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Application log file was cleared.104041040-92233720368547758082219Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The System log file was cleared.104041040-92233720368547758082218Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]