MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403684Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041880n-h2-773644-4.cbci-773644-4.local6/1/2021 1:40:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403683Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041880n-h2-773644-4.cbci-773644-4.local6/1/2021 1:38:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403682Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041880n-h2-773644-4.cbci-773644-4.local6/1/2021 1:38:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A0EF17B5-7983-4AB2-AF8F-69EDB2514C21--EB0464FD-4675-4DCA-9CCA-EE1373AE1FFE (Friendly Name: e0465d70-8f7a-4a25-bf08-cd8678efd4d8).2330400-92233720368547758083681Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45244864n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2700023733-1253210499-3983118255-5586497786/1/2021 1:37:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0EF17B5-7983-4AB2-AF8F-69EDB2514C21--EB0464FD-4675-4DCA-9CCA-EE1373AE1FFE successfully disconnected from port .2340400-92233720368547758083680Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45244864n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2700023733-1253210499-3983118255-5586497786/1/2021 1:37:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0EF17B5-7983-4AB2-AF8F-69EDB2514C21--EB0464FD-4675-4DCA-9CCA-EE1373AE1FFE (Friendly Name: e0465d70-8f7a-4a25-bf08-cd8678efd4d8) successfully connected to port 5472C672-982D-4C33-B6EB-8BD58C40B64D (Friendly Name: e0465d70-8f7a-4a25-bf08-cd8678efd4d8) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083679Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45244864n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2700023733-1253210499-3983118255-5586497786/1/2021 1:36:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A0EF17B5-7983-4AB2-AF8F-69EDB2514C21--EB0464FD-4675-4DCA-9CCA-EE1373AE1FFE (Friendly Name: ).2330400-92233720368547758083678Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45244864n-h2-773644-4.cbci-773644-4.local6/1/2021 1:36:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403677Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045740n-h2-773644-4.cbci-773644-4.local6/1/2021 1:36:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the stopped state.7036016384400-91873432398358118403676Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045740n-h2-773644-4.cbci-773644-4.local6/1/2021 1:28:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403675Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045740n-h2-773644-4.cbci-773644-4.local6/1/2021 1:28:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403674Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045740n-h2-773644-4.cbci-773644-4.local6/1/2021 1:28:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403673Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045740n-h2-773644-4.cbci-773644-4.local6/1/2021 1:22:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D71931C4-8ADC-4BE0-AD25-B13CDA2BF0FD--C011DD4D-D5D2-432F-BE09-7AC1BDD53EC0 (Friendly Name: 5d5fff95-04b8-4e59-a0c6-1ee7c867f724).2330400-92233720368547758083672Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem812932n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3608752580-1273006812-1018242477-42603755146/1/2021 1:20:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D71931C4-8ADC-4BE0-AD25-B13CDA2BF0FD--C011DD4D-D5D2-432F-BE09-7AC1BDD53EC0 successfully disconnected from port .2340400-92233720368547758083671Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem812932n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3608752580-1273006812-1018242477-42603755146/1/2021 1:20:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-AE-86-28 has moved from port B80AB9A5-82E6-4F37-8B40-7CC836A15BDB (Friendly Name: 5d5fff95-04b8-4e59-a0c6-1ee7c867f724) to port B80AB9A5-82E6-4F37-8B40-7CC836A15BDB (Friendly Name: 5d5fff95-04b8-4e59-a0c6-1ee7c867f724).250410180-92233720368547758083670Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284664n-h2-773644-4.cbci-773644-4.local6/1/2021 1:19:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-AE-86-28 has moved from port 646218F0-F3AE-467D-8B40-4F59F54AD02E (Friendly Name: br-data_External) to port B80AB9A5-82E6-4F37-8B40-7CC836A15BDB (Friendly Name: 5d5fff95-04b8-4e59-a0c6-1ee7c867f724).250410180-92233720368547758083669Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25283756n-h2-773644-4.cbci-773644-4.local6/1/2021 1:19:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D71931C4-8ADC-4BE0-AD25-B13CDA2BF0FD--C011DD4D-D5D2-432F-BE09-7AC1BDD53EC0 (Friendly Name: 5d5fff95-04b8-4e59-a0c6-1ee7c867f724) successfully connected to port B80AB9A5-82E6-4F37-8B40-7CC836A15BDB (Friendly Name: 5d5fff95-04b8-4e59-a0c6-1ee7c867f724) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083668Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8126132n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3608752580-1273006812-1018242477-42603755146/1/2021 1:19:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403667Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041880n-h2-773644-4.cbci-773644-4.local6/1/2021 1:19:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D71931C4-8ADC-4BE0-AD25-B13CDA2BF0FD--C011DD4D-D5D2-432F-BE09-7AC1BDD53EC0 (Friendly Name: ).2330400-92233720368547758083666Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8126132n-h2-773644-4.cbci-773644-4.local6/1/2021 1:19:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403665Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041880n-h2-773644-4.cbci-773644-4.local6/1/2021 1:16:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403664Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041880n-h2-773644-4.cbci-773644-4.local6/1/2021 1:15:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F0B162DE-C447-487A-A782-11DE4949EEAD--BCE98002-0ADA-416F-AFDC-89718AFC1F8E (Friendly Name: e122b832-1a00-4854-87a5-316c29cbc158).2330400-92233720368547758083663Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18964812n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4038157022-1216005191-3725689511-29180746976/1/2021 1:15:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F0B162DE-C447-487A-A782-11DE4949EEAD--BCE98002-0ADA-416F-AFDC-89718AFC1F8E successfully disconnected from port .2340400-92233720368547758083662Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18964812n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4038157022-1216005191-3725689511-29180746976/1/2021 1:15:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F0B162DE-C447-487A-A782-11DE4949EEAD--BCE98002-0ADA-416F-AFDC-89718AFC1F8E (Friendly Name: e122b832-1a00-4854-87a5-316c29cbc158) successfully connected to port AB3310F9-E22C-4DBB-BA50-6F24FC66101D (Friendly Name: e122b832-1a00-4854-87a5-316c29cbc158) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083661Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18965024n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4038157022-1216005191-3725689511-29180746976/1/2021 1:14:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F0B162DE-C447-487A-A782-11DE4949EEAD--BCE98002-0ADA-416F-AFDC-89718AFC1F8E (Friendly Name: ).2330400-92233720368547758083660Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18965024n-h2-773644-4.cbci-773644-4.local6/1/2021 1:14:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F0B162DE-C447-487A-A782-11DE4949EEAD--BCE98002-0ADA-416F-AFDC-89718AFC1F8E (Friendly Name: e122b832-1a00-4854-87a5-316c29cbc158).2330400-92233720368547758083659Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59364232n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4038157022-1216005191-3725689511-29180746976/1/2021 1:14:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F0B162DE-C447-487A-A782-11DE4949EEAD--BCE98002-0ADA-416F-AFDC-89718AFC1F8E successfully disconnected from port .2340400-92233720368547758083658Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59364232n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4038157022-1216005191-3725689511-29180746976/1/2021 1:14:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403657Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8045740n-h2-773644-4.cbci-773644-4.local6/1/2021 1:13:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F0B162DE-C447-487A-A782-11DE4949EEAD--BCE98002-0ADA-416F-AFDC-89718AFC1F8E (Friendly Name: e122b832-1a00-4854-87a5-316c29cbc158) successfully connected to port AB3310F9-E22C-4DBB-BA50-6F24FC66101D (Friendly Name: e122b832-1a00-4854-87a5-316c29cbc158) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083656Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59364232n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4038157022-1216005191-3725689511-29180746976/1/2021 1:13:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F0B162DE-C447-487A-A782-11DE4949EEAD--BCE98002-0ADA-416F-AFDC-89718AFC1F8E (Friendly Name: ).2330400-92233720368547758083655Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59364232n-h2-773644-4.cbci-773644-4.local6/1/2021 1:13:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403654Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 1:13:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403653Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 1:13:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403652Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041880n-h2-773644-4.cbci-773644-4.local6/1/2021 1:11:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1328F7E4-7578-4267-A0B5-63E8329427DF--D56162C5-0F66-4612-8395-B61CDBA2B875 (Friendly Name: d1fa985c-be1d-4b9e-98f7-fc0b8ee13a17).2330400-92233720368547758083651Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57485820n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-321452004-1114076536-3898848672-37439130106/1/2021 1:10:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1328F7E4-7578-4267-A0B5-63E8329427DF--D56162C5-0F66-4612-8395-B61CDBA2B875 successfully disconnected from port .2340400-92233720368547758083650Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57485820n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-321452004-1114076536-3898848672-37439130106/1/2021 1:10:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1328F7E4-7578-4267-A0B5-63E8329427DF--D56162C5-0F66-4612-8395-B61CDBA2B875 (Friendly Name: d1fa985c-be1d-4b9e-98f7-fc0b8ee13a17) successfully connected to port 5807D658-0A90-4BD7-9C0C-9DB7EAD386C1 (Friendly Name: d1fa985c-be1d-4b9e-98f7-fc0b8ee13a17) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083649Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57485976n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-321452004-1114076536-3898848672-37439130106/1/2021 1:10:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1328F7E4-7578-4267-A0B5-63E8329427DF--D56162C5-0F66-4612-8395-B61CDBA2B875 (Friendly Name: ).2330400-92233720368547758083648Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57485976n-h2-773644-4.cbci-773644-4.local6/1/2021 1:10:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1756D63D-5173-4FED-8986-46EBBDE41A3F--6B79E414-0B03-49B3-9A84-D7FF7A204C86 (Friendly Name: 97309110-decc-40f0-9636-81015996e1bd).2330400-92233720368547758083647Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28601700n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-391566909-1340952947-3947267721-10587271016/1/2021 1:09:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1756D63D-5173-4FED-8986-46EBBDE41A3F--6B79E414-0B03-49B3-9A84-D7FF7A204C86 successfully disconnected from port .2340400-92233720368547758083646Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28601700n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-391566909-1340952947-3947267721-10587271016/1/2021 1:09:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-2B-7F-CD has moved from port EC98A36F-12D7-4542-AFF7-5460B7527222 (Friendly Name: 97309110-decc-40f0-9636-81015996e1bd) to port EC98A36F-12D7-4542-AFF7-5460B7527222 (Friendly Name: 97309110-decc-40f0-9636-81015996e1bd).250410180-92233720368547758083645Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284580n-h2-773644-4.cbci-773644-4.local6/1/2021 1:09:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1756D63D-5173-4FED-8986-46EBBDE41A3F--6B79E414-0B03-49B3-9A84-D7FF7A204C86 (Friendly Name: 97309110-decc-40f0-9636-81015996e1bd) successfully connected to port EC98A36F-12D7-4542-AFF7-5460B7527222 (Friendly Name: 97309110-decc-40f0-9636-81015996e1bd) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083644Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2860316n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-391566909-1340952947-3947267721-10587271016/1/2021 1:09:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1756D63D-5173-4FED-8986-46EBBDE41A3F--6B79E414-0B03-49B3-9A84-D7FF7A204C86 (Friendly Name: ).2330400-92233720368547758083643Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28605932n-h2-773644-4.cbci-773644-4.local6/1/2021 1:09:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 66D4BF96-BBD9-4666-B0B2-A33FF95A7844--603E5A12-71D6-44E1-9C2D-FF674A490882 (Friendly Name: 97309110-decc-40f0-9636-81015996e1bd).2330400-92233720368547758083642Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39285888n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1725218710-1181137881-1067692720-11487382976/1/2021 1:09:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 66D4BF96-BBD9-4666-B0B2-A33FF95A7844--603E5A12-71D6-44E1-9C2D-FF674A490882 successfully disconnected from port .2340400-92233720368547758083641Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39285888n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1725218710-1181137881-1067692720-11487382976/1/2021 1:09:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the running state.7036016384400-91873432398358118403640Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041884n-h2-773644-4.cbci-773644-4.local6/1/2021 1:08:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403639Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041884n-h2-773644-4.cbci-773644-4.local6/1/2021 1:08:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 66D4BF96-BBD9-4666-B0B2-A33FF95A7844--603E5A12-71D6-44E1-9C2D-FF674A490882 (Friendly Name: 97309110-decc-40f0-9636-81015996e1bd) successfully connected to port 349133C5-7950-46C3-8B2C-E8EF86F63B80 (Friendly Name: 97309110-decc-40f0-9636-81015996e1bd) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083638Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39285888n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1725218710-1181137881-1067692720-11487382976/1/2021 1:07:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 66D4BF96-BBD9-4666-B0B2-A33FF95A7844--603E5A12-71D6-44E1-9C2D-FF674A490882 (Friendly Name: ).2330400-92233720368547758083637Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39285888n-h2-773644-4.cbci-773644-4.local6/1/2021 1:07:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 4EEF25ED-E120-4E80-8CF0-91D9A1DBAB0E--3FD41931-8665-4A96-B317-3159E5993963 (Friendly Name: 8a3b9b25-402f-4aeb-b5b1-f23c5541998a).2330400-92233720368547758083636Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20442276n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1324295661-1317069088-3650220172-2461439056/1/2021 1:06:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4EEF25ED-E120-4E80-8CF0-91D9A1DBAB0E--3FD41931-8665-4A96-B317-3159E5993963 successfully disconnected from port .2340400-92233720368547758083635Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20442276n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1324295661-1317069088-3650220172-2461439056/1/2021 1:06:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-37-87-EC has moved from port 3A0993D3-7637-44B9-AD13-7C848AB4F62A (Friendly Name: 8a3b9b25-402f-4aeb-b5b1-f23c5541998a) to port 3A0993D3-7637-44B9-AD13-7C848AB4F62A (Friendly Name: 8a3b9b25-402f-4aeb-b5b1-f23c5541998a).250410180-92233720368547758083634Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284580n-h2-773644-4.cbci-773644-4.local6/1/2021 1:06:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-37-87-EC has moved from port 646218F0-F3AE-467D-8B40-4F59F54AD02E (Friendly Name: br-data_External) to port 3A0993D3-7637-44B9-AD13-7C848AB4F62A (Friendly Name: 8a3b9b25-402f-4aeb-b5b1-f23c5541998a).250410180-92233720368547758083633Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284664n-h2-773644-4.cbci-773644-4.local6/1/2021 1:06:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4EEF25ED-E120-4E80-8CF0-91D9A1DBAB0E--3FD41931-8665-4A96-B317-3159E5993963 (Friendly Name: 8a3b9b25-402f-4aeb-b5b1-f23c5541998a) successfully connected to port 3A0993D3-7637-44B9-AD13-7C848AB4F62A (Friendly Name: 8a3b9b25-402f-4aeb-b5b1-f23c5541998a) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083632Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20443552n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1324295661-1317069088-3650220172-2461439056/1/2021 1:06:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 4EEF25ED-E120-4E80-8CF0-91D9A1DBAB0E--3FD41931-8665-4A96-B317-3159E5993963 (Friendly Name: ).2330400-92233720368547758083631Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20443672n-h2-773644-4.cbci-773644-4.local6/1/2021 1:06:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the stopped state.7036016384400-91873432398358118403630Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 1:05:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6A02A12B-D440-440B-927C-31DEC314062D--76EA3299-935C-4A3B-AFD9-F487808BB51D (Friendly Name: b7f8f48a-e376-470b-9acf-563cf0101dc2).2330400-92233720368547758083629Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43564432n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1778557227-1141625920-3727785106-7553732516/1/2021 1:04:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6A02A12B-D440-440B-927C-31DEC314062D--76EA3299-935C-4A3B-AFD9-F487808BB51D successfully disconnected from port .2340400-92233720368547758083628Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43564432n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1778557227-1141625920-3727785106-7553732516/1/2021 1:04:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6A02A12B-D440-440B-927C-31DEC314062D--76EA3299-935C-4A3B-AFD9-F487808BB51D (Friendly Name: b7f8f48a-e376-470b-9acf-563cf0101dc2) successfully connected to port 7B95A450-5FDA-4F3D-99BD-1A3572040605 (Friendly Name: b7f8f48a-e376-470b-9acf-563cf0101dc2) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083627Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43564692n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1778557227-1141625920-3727785106-7553732516/1/2021 1:04:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6A02A12B-D440-440B-927C-31DEC314062D--76EA3299-935C-4A3B-AFD9-F487808BB51D (Friendly Name: ).2330400-92233720368547758083626Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43564692n-h2-773644-4.cbci-773644-4.local6/1/2021 1:04:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403625Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 1:04:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403624Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 1:02:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A5BA4208-9009-4B1F-8BD6-AE3505118AB6--48EB983C-4C67-4513-8723-918EA6B8E940 (Friendly Name: 0fffa5b6-2337-40b7-b502-82196b9bef8c).2330400-92233720368547758083623Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47086052n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2780447240-1260359689-900650635-30625016376/1/2021 1:01:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A5BA4208-9009-4B1F-8BD6-AE3505118AB6--48EB983C-4C67-4513-8723-918EA6B8E940 successfully disconnected from port .2340400-92233720368547758083622Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47086052n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2780447240-1260359689-900650635-30625016376/1/2021 1:01:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A5BA4208-9009-4B1F-8BD6-AE3505118AB6--48EB983C-4C67-4513-8723-918EA6B8E940 (Friendly Name: 0fffa5b6-2337-40b7-b502-82196b9bef8c) successfully connected to port D9FB0D0E-3C65-497D-8A92-770B0C318A1F (Friendly Name: 0fffa5b6-2337-40b7-b502-82196b9bef8c) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083621Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47083416n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2780447240-1260359689-900650635-30625016376/1/2021 12:59:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A5BA4208-9009-4B1F-8BD6-AE3505118AB6--48EB983C-4C67-4513-8723-918EA6B8E940 (Friendly Name: ).2330400-92233720368547758083620Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47083416n-h2-773644-4.cbci-773644-4.local6/1/2021 12:59:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A5ACF62A-3806-433E-9B50-2C9B5E151F15--7A2BC124-4FFF-4D07-9551-4ECA6A9F1754 (Friendly Name: ae0042eb-fc9b-4911-8d94-c347220b849b).2330400-92233720368547758083619Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13362412n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2779575850-1128151046-2603372699-3543586226/1/2021 12:59:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A5ACF62A-3806-433E-9B50-2C9B5E151F15--7A2BC124-4FFF-4D07-9551-4ECA6A9F1754 successfully disconnected from port .2340400-92233720368547758083618Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13362412n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2779575850-1128151046-2603372699-3543586226/1/2021 12:59:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-58-E0-95 has moved from port 7EBFC6C4-F48A-449F-BFD9-608DEF7C68C7 (Friendly Name: ae0042eb-fc9b-4911-8d94-c347220b849b) to port 7EBFC6C4-F48A-449F-BFD9-608DEF7C68C7 (Friendly Name: ae0042eb-fc9b-4911-8d94-c347220b849b).250410180-92233720368547758083617Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284636n-h2-773644-4.cbci-773644-4.local6/1/2021 12:59:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-58-E0-95 has moved from port 646218F0-F3AE-467D-8B40-4F59F54AD02E (Friendly Name: br-data_External) to port 7EBFC6C4-F48A-449F-BFD9-608DEF7C68C7 (Friendly Name: ae0042eb-fc9b-4911-8d94-c347220b849b).250410180-92233720368547758083616Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284636n-h2-773644-4.cbci-773644-4.local6/1/2021 12:59:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A5ACF62A-3806-433E-9B50-2C9B5E151F15--7A2BC124-4FFF-4D07-9551-4ECA6A9F1754 (Friendly Name: ae0042eb-fc9b-4911-8d94-c347220b849b) successfully connected to port 7EBFC6C4-F48A-449F-BFD9-608DEF7C68C7 (Friendly Name: ae0042eb-fc9b-4911-8d94-c347220b849b) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083615Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13362412n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2779575850-1128151046-2603372699-3543586226/1/2021 12:59:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A5ACF62A-3806-433E-9B50-2C9B5E151F15--7A2BC124-4FFF-4D07-9551-4ECA6A9F1754 (Friendly Name: ).2330400-92233720368547758083614Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13362412n-h2-773644-4.cbci-773644-4.local6/1/2021 12:59:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 4024C68B-4DFB-4131-8A51-31F71B309C74--78BE36B9-7AF8-4818-8B87-B2F9674D95F9 (Friendly Name: 1099cb25-008f-4973-9e5b-85e348ba36da).2330400-92233720368547758083613Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5724612n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1076151947-1093750267-4147204490-19563929876/1/2021 12:58:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4024C68B-4DFB-4131-8A51-31F71B309C74--78BE36B9-7AF8-4818-8B87-B2F9674D95F9 successfully disconnected from port .2340400-92233720368547758083612Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5724612n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1076151947-1093750267-4147204490-19563929876/1/2021 12:58:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-8E-4C-A3 has moved from port 54A003E1-5EEB-4DFF-A1A5-B522AE8CB78E (Friendly Name: 1099cb25-008f-4973-9e5b-85e348ba36da) to port 54A003E1-5EEB-4DFF-A1A5-B522AE8CB78E (Friendly Name: 1099cb25-008f-4973-9e5b-85e348ba36da).250410180-92233720368547758083611Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284636n-h2-773644-4.cbci-773644-4.local6/1/2021 12:58:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-8E-4C-A3 has moved from port 646218F0-F3AE-467D-8B40-4F59F54AD02E (Friendly Name: br-data_External) to port 54A003E1-5EEB-4DFF-A1A5-B522AE8CB78E (Friendly Name: 1099cb25-008f-4973-9e5b-85e348ba36da).250410180-92233720368547758083610Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284636n-h2-773644-4.cbci-773644-4.local6/1/2021 12:58:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4024C68B-4DFB-4131-8A51-31F71B309C74--78BE36B9-7AF8-4818-8B87-B2F9674D95F9 (Friendly Name: 1099cb25-008f-4973-9e5b-85e348ba36da) successfully connected to port 54A003E1-5EEB-4DFF-A1A5-B522AE8CB78E (Friendly Name: 1099cb25-008f-4973-9e5b-85e348ba36da) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083609Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5724612n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1076151947-1093750267-4147204490-19563929876/1/2021 12:58:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 4024C68B-4DFB-4131-8A51-31F71B309C74--78BE36B9-7AF8-4818-8B87-B2F9674D95F9 (Friendly Name: ).2330400-92233720368547758083608Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57245020n-h2-773644-4.cbci-773644-4.local6/1/2021 12:58:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403607Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 12:58:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403606Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 12:58:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 07E9F48C-0FD5-41F6-B7ED-3C8EBCA53526--62E0217E-FB61-406C-AEF2-03DF4E60D8B5 (Friendly Name: 17aa8e77-f3b0-499e-934f-e34517b6391f).2330400-92233720368547758083605Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33605848n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-132773004-1106644949-2386357687-6410500446/1/2021 12:57:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 07E9F48C-0FD5-41F6-B7ED-3C8EBCA53526--62E0217E-FB61-406C-AEF2-03DF4E60D8B5 successfully disconnected from port .2340400-92233720368547758083604Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33605848n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-132773004-1106644949-2386357687-6410500446/1/2021 12:57:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 07E9F48C-0FD5-41F6-B7ED-3C8EBCA53526--62E0217E-FB61-406C-AEF2-03DF4E60D8B5 (Friendly Name: 17aa8e77-f3b0-499e-934f-e34517b6391f) successfully connected to port 9EAEB60D-6921-4802-B8E8-F6CB24067F9F (Friendly Name: 17aa8e77-f3b0-499e-934f-e34517b6391f) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083603Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33603184n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-132773004-1106644949-2386357687-6410500446/1/2021 12:57:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 07E9F48C-0FD5-41F6-B7ED-3C8EBCA53526--62E0217E-FB61-406C-AEF2-03DF4E60D8B5 (Friendly Name: ).2330400-92233720368547758083602Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33603184n-h2-773644-4.cbci-773644-4.local6/1/2021 12:57:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5F960CEC-3B08-49A5-91E1-B237085DCA4A--DAEC12BE-7BA1-49AB-8CA9-97CE52E803B5 (Friendly Name: 030014d0-8971-413e-a429-4f36c9609675).2330400-92233720368547758083601Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57803944n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1603669228-1235565320-934470033-12547760726/1/2021 12:56:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5F960CEC-3B08-49A5-91E1-B237085DCA4A--DAEC12BE-7BA1-49AB-8CA9-97CE52E803B5 successfully disconnected from port .2340400-92233720368547758083600Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57803944n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1603669228-1235565320-934470033-12547760726/1/2021 12:56:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5F960CEC-3B08-49A5-91E1-B237085DCA4A--DAEC12BE-7BA1-49AB-8CA9-97CE52E803B5 (Friendly Name: 030014d0-8971-413e-a429-4f36c9609675) successfully connected to port 24793A89-E203-4104-8A01-B6A638E025EF (Friendly Name: 030014d0-8971-413e-a429-4f36c9609675) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083599Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57804448n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1603669228-1235565320-934470033-12547760726/1/2021 12:56:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5F960CEC-3B08-49A5-91E1-B237085DCA4A--DAEC12BE-7BA1-49AB-8CA9-97CE52E803B5 (Friendly Name: ).2330400-92233720368547758083598Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57804448n-h2-773644-4.cbci-773644-4.local6/1/2021 12:56:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403597Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 12:56:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403596Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:53:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A1E39E20-17D1-4761-B7D2-E77AF0A83901--A6FFEFA9-5293-4758-BF4F-9E8982D1C8EA (Friendly Name: fe4dc279-0729-46c0-b536-022c092792f2).2330400-92233720368547758083595Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41361136n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2716048928-1197545425-2062013111-205560166/1/2021 12:52:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A1E39E20-17D1-4761-B7D2-E77AF0A83901--A6FFEFA9-5293-4758-BF4F-9E8982D1C8EA successfully disconnected from port .2340400-92233720368547758083594Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41361136n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2716048928-1197545425-2062013111-205560166/1/2021 12:52:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403593Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 12:52:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BDFA707E-5126-4CC0-BF99-35645E44C98B--7C12E7D7-CF70-4DAA-AD00-CF911668004B (Friendly Name: 3079b883-65ed-4d48-8490-f138946e4a67).2330400-92233720368547758083592Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60365128n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3187306622-1287672102-1681234367-23452232626/1/2021 12:52:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BDFA707E-5126-4CC0-BF99-35645E44C98B--7C12E7D7-CF70-4DAA-AD00-CF911668004B successfully disconnected from port .2340400-92233720368547758083591Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60365128n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3187306622-1287672102-1681234367-23452232626/1/2021 12:52:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BDFA707E-5126-4CC0-BF99-35645E44C98B--7C12E7D7-CF70-4DAA-AD00-CF911668004B (Friendly Name: 3079b883-65ed-4d48-8490-f138946e4a67) successfully connected to port 1E6F7CDB-F40B-478E-BEAA-8430C63082B5 (Friendly Name: 3079b883-65ed-4d48-8490-f138946e4a67) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083590Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60364932n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3187306622-1287672102-1681234367-23452232626/1/2021 12:50:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BDFA707E-5126-4CC0-BF99-35645E44C98B--7C12E7D7-CF70-4DAA-AD00-CF911668004B (Friendly Name: ).2330400-92233720368547758083589Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60364932n-h2-773644-4.cbci-773644-4.local6/1/2021 12:50:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403588Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:50:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403587Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 12:50:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A1E39E20-17D1-4761-B7D2-E77AF0A83901--A6FFEFA9-5293-4758-BF4F-9E8982D1C8EA (Friendly Name: fe4dc279-0729-46c0-b536-022c092792f2) successfully connected to port 8F368804-4FF5-44D7-AED6-663D63CF30C5 (Friendly Name: fe4dc279-0729-46c0-b536-022c092792f2) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083586Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41363116n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2716048928-1197545425-2062013111-205560166/1/2021 12:48:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A1E39E20-17D1-4761-B7D2-E77AF0A83901--A6FFEFA9-5293-4758-BF4F-9E8982D1C8EA (Friendly Name: ).2330400-92233720368547758083585Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41363116n-h2-773644-4.cbci-773644-4.local6/1/2021 12:48:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 9DB77C7F-CBF8-424E-BFB5-5DCC7A418ADA--560FD96B-9A40-4AD2-9F65-45A01516D9F8 (Friendly Name: 47fae798-4270-4602-b5dc-d0ecb02c58cf).2330400-92233720368547758083584Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17685172n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2646047871-1112460280-3428693439-36664938186/1/2021 12:48:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9DB77C7F-CBF8-424E-BFB5-5DCC7A418ADA--560FD96B-9A40-4AD2-9F65-45A01516D9F8 successfully disconnected from port .2340400-92233720368547758083583Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17685172n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2646047871-1112460280-3428693439-36664938186/1/2021 12:48:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403582Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:48:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9DB77C7F-CBF8-424E-BFB5-5DCC7A418ADA--560FD96B-9A40-4AD2-9F65-45A01516D9F8 (Friendly Name: 47fae798-4270-4602-b5dc-d0ecb02c58cf) successfully connected to port 30410CE8-46C3-4E37-BD2F-ECB11EE745CB (Friendly Name: 47fae798-4270-4602-b5dc-d0ecb02c58cf) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083581Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17683800n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2646047871-1112460280-3428693439-36664938186/1/2021 12:47:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 9DB77C7F-CBF8-424E-BFB5-5DCC7A418ADA--560FD96B-9A40-4AD2-9F65-45A01516D9F8 (Friendly Name: ).2330400-92233720368547758083580Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17683800n-h2-773644-4.cbci-773644-4.local6/1/2021 12:47:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 85638BDC-01F9-419A-8ED8-F164538E3412--F6742F0A-34A7-4AC1-B46F-A1819C6601ED (Friendly Name: b61f85b8-2a51-4d21-a72a-7129dfc5081e).2330400-92233720368547758083579Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61166076n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2237893596-1100612089-1693571214-3054341956/1/2021 12:47:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 85638BDC-01F9-419A-8ED8-F164538E3412--F6742F0A-34A7-4AC1-B46F-A1819C6601ED successfully disconnected from port .2340400-92233720368547758083578Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61166076n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2237893596-1100612089-1693571214-3054341956/1/2021 12:47:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403577Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:47:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403576Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:47:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403575Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:47:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 85638BDC-01F9-419A-8ED8-F164538E3412--F6742F0A-34A7-4AC1-B46F-A1819C6601ED (Friendly Name: b61f85b8-2a51-4d21-a72a-7129dfc5081e) successfully connected to port 2197E859-8C53-4D00-A947-0B981E1E21CF (Friendly Name: b61f85b8-2a51-4d21-a72a-7129dfc5081e) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083574Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61164812n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2237893596-1100612089-1693571214-3054341956/1/2021 12:45:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 85638BDC-01F9-419A-8ED8-F164538E3412--F6742F0A-34A7-4AC1-B46F-A1819C6601ED (Friendly Name: ).2330400-92233720368547758083573Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61164812n-h2-773644-4.cbci-773644-4.local6/1/2021 12:45:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C508696E-01C8-4292-9786-AEEDF3FA040F--0E73A319-777F-4EEF-8E95-D73EB9959BA3 (Friendly Name: 5f4b599d-4b3c-4302-a829-53c61c230516).2330400-92233720368547758083572Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36444004n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3305662830-1116864968-3987637911-2519846276/1/2021 12:44:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C508696E-01C8-4292-9786-AEEDF3FA040F--0E73A319-777F-4EEF-8E95-D73EB9959BA3 successfully disconnected from port .2340400-92233720368547758083571Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36444004n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3305662830-1116864968-3987637911-2519846276/1/2021 12:44:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C508696E-01C8-4292-9786-AEEDF3FA040F--0E73A319-777F-4EEF-8E95-D73EB9959BA3 (Friendly Name: 5f4b599d-4b3c-4302-a829-53c61c230516) successfully connected to port 27214E47-2DC2-4E5E-B353-B5A60C918BA1 (Friendly Name: 5f4b599d-4b3c-4302-a829-53c61c230516) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083570Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36444004n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3305662830-1116864968-3987637911-2519846276/1/2021 12:44:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C508696E-01C8-4292-9786-AEEDF3FA040F--0E73A319-777F-4EEF-8E95-D73EB9959BA3 (Friendly Name: ).2330400-92233720368547758083569Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36444004n-h2-773644-4.cbci-773644-4.local6/1/2021 12:44:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F7116BF6-F981-4F2F-BADC-29E8E71198A8--0488369A-688E-47B8-9CE6-243397C10FC4 (Friendly Name: 95a39803-f842-45a3-97d1-dc8e6dbfc785).2330400-92233720368547758083568Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58964072n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4145114102-1328544129-3895057594-28285383436/1/2021 12:43:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F7116BF6-F981-4F2F-BADC-29E8E71198A8--0488369A-688E-47B8-9CE6-243397C10FC4 successfully disconnected from port .2340400-92233720368547758083567Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58964072n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4145114102-1328544129-3895057594-28285383436/1/2021 12:43:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F7116BF6-F981-4F2F-BADC-29E8E71198A8--0488369A-688E-47B8-9CE6-243397C10FC4 (Friendly Name: 95a39803-f842-45a3-97d1-dc8e6dbfc785) successfully connected to port F963A72B-B2F0-4F78-B764-D8BD83497F58 (Friendly Name: 95a39803-f842-45a3-97d1-dc8e6dbfc785) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083566Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58964072n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4145114102-1328544129-3895057594-28285383436/1/2021 12:43:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F7116BF6-F981-4F2F-BADC-29E8E71198A8--0488369A-688E-47B8-9CE6-243397C10FC4 (Friendly Name: ).2330400-92233720368547758083565Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58964072n-h2-773644-4.cbci-773644-4.local6/1/2021 12:43:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F615696D-044B-417F-9392-22360D51947A--17F65B6B-3F21-4D68-9EF2-B4699E41FD8D (Friendly Name: e56f3ae8-5122-4ed8-9901-23e50f9c9723).2330400-92233720368547758083564Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53841904n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4128598381-1098843211-908235411-20565404296/1/2021 12:42:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F615696D-044B-417F-9392-22360D51947A--17F65B6B-3F21-4D68-9EF2-B4699E41FD8D successfully disconnected from port .2340400-92233720368547758083563Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53841904n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4128598381-1098843211-908235411-20565404296/1/2021 12:42:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F615696D-044B-417F-9392-22360D51947A--17F65B6B-3F21-4D68-9EF2-B4699E41FD8D (Friendly Name: e56f3ae8-5122-4ed8-9901-23e50f9c9723) successfully connected to port 6473DB0A-F856-4386-A693-196BF8D73075 (Friendly Name: e56f3ae8-5122-4ed8-9901-23e50f9c9723) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083562Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53841904n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4128598381-1098843211-908235411-20565404296/1/2021 12:41:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F615696D-044B-417F-9392-22360D51947A--17F65B6B-3F21-4D68-9EF2-B4699E41FD8D (Friendly Name: ).2330400-92233720368547758083561Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53841904n-h2-773644-4.cbci-773644-4.local6/1/2021 12:41:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 583AD691-713F-4368-8B4E-7B174ADFD73B--C2EBEC4D-1C0A-4971-A976-17531CF9386C (Friendly Name: f0099383-3816-43bb-be13-bf15bdd80ccd).2330400-92233720368547758083560Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41443396n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1480251025-1130918207-393957003-10040031466/1/2021 12:41:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 583AD691-713F-4368-8B4E-7B174ADFD73B--C2EBEC4D-1C0A-4971-A976-17531CF9386C successfully disconnected from port .2340400-92233720368547758083559Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41443396n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1480251025-1130918207-393957003-10040031466/1/2021 12:41:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 583AD691-713F-4368-8B4E-7B174ADFD73B--C2EBEC4D-1C0A-4971-A976-17531CF9386C (Friendly Name: f0099383-3816-43bb-be13-bf15bdd80ccd) successfully connected to port 0B484919-7F27-4691-86F9-6366EEB70CDC (Friendly Name: f0099383-3816-43bb-be13-bf15bdd80ccd) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083558Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41441608n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1480251025-1130918207-393957003-10040031466/1/2021 12:40:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 583AD691-713F-4368-8B4E-7B174ADFD73B--C2EBEC4D-1C0A-4971-A976-17531CF9386C (Friendly Name: ).2330400-92233720368547758083557Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41441608n-h2-773644-4.cbci-773644-4.local6/1/2021 12:40:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403556Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:40:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CC82F823-09AF-4F51-8936-E8D47A3AD7DB--7DD7CDE8-CE8C-4157-811F-37523E5EEF33 (Friendly Name: 7b56dee4-4f5f-4685-8372-aa04e98103f9).2330400-92233720368547758083555Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28083156n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3431135267-1330710959-3571988105-36883155146/1/2021 12:40:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CC82F823-09AF-4F51-8936-E8D47A3AD7DB--7DD7CDE8-CE8C-4157-811F-37523E5EEF33 successfully disconnected from port .2340400-92233720368547758083554Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28083156n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3431135267-1330710959-3571988105-36883155146/1/2021 12:40:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CC82F823-09AF-4F51-8936-E8D47A3AD7DB--7DD7CDE8-CE8C-4157-811F-37523E5EEF33 (Friendly Name: 7b56dee4-4f5f-4685-8372-aa04e98103f9) successfully connected to port F942D8CF-9F5E-4208-B70C-2CCF65D83468 (Friendly Name: 7b56dee4-4f5f-4685-8372-aa04e98103f9) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083553Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28082188n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3431135267-1330710959-3571988105-36883155146/1/2021 12:40:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CC82F823-09AF-4F51-8936-E8D47A3AD7DB--7DD7CDE8-CE8C-4157-811F-37523E5EEF33 (Friendly Name: ).2330400-92233720368547758083552Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28082188n-h2-773644-4.cbci-773644-4.local6/1/2021 12:40:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403551Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:40:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic System Host service entered the stopped state.7036016384400-91873432398358118403550Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:40:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403549Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 12:39:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 4A720077-B495-4798-996A-3498C0BC6B7D--AA644243-7E7C-4D37-8EB3-5BD8DC57492A (Friendly Name: 29df22f4-2a41-4156-ac57-7f37c24b7281).2330400-92233720368547758083548Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44325480n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1248985207-1201190037-2553571993-21042126726/1/2021 12:38:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4A720077-B495-4798-996A-3498C0BC6B7D--AA644243-7E7C-4D37-8EB3-5BD8DC57492A successfully disconnected from port .2340400-92233720368547758083547Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44325480n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1248985207-1201190037-2553571993-21042126726/1/2021 12:38:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403546Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 12:38:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403545Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 12:37:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 194516EF-0A63-4D7E-BE32-04F4312BF983--28337099-8302-4960-8090-6C25C6B0F165 (Friendly Name: 4e42357e-1693-4b00-85fa-4abbfca4e9e4).2330400-92233720368547758083544Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43722272n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-423958255-1300105827-4093915838-22141448176/1/2021 12:37:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 194516EF-0A63-4D7E-BE32-04F4312BF983--28337099-8302-4960-8090-6C25C6B0F165 successfully disconnected from port .2340400-92233720368547758083543Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43722272n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-423958255-1300105827-4093915838-22141448176/1/2021 12:37:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 4A720077-B495-4798-996A-3498C0BC6B7D--AA644243-7E7C-4D37-8EB3-5BD8DC57492A (Friendly Name: 29df22f4-2a41-4156-ac57-7f37c24b7281) successfully connected to port B1057C7A-D1F2-420B-9283-7BFFD8CF73F5 (Friendly Name: 29df22f4-2a41-4156-ac57-7f37c24b7281) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083542Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44323512n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1248985207-1201190037-2553571993-21042126726/1/2021 12:36:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 4A720077-B495-4798-996A-3498C0BC6B7D--AA644243-7E7C-4D37-8EB3-5BD8DC57492A (Friendly Name: ).2330400-92233720368547758083541Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44323512n-h2-773644-4.cbci-773644-4.local6/1/2021 12:36:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 194516EF-0A63-4D7E-BE32-04F4312BF983--28337099-8302-4960-8090-6C25C6B0F165 (Friendly Name: 4e42357e-1693-4b00-85fa-4abbfca4e9e4) successfully connected to port 3DAAC4C1-1F3C-43CA-B27B-5FE0F5FEC2CB (Friendly Name: 4e42357e-1693-4b00-85fa-4abbfca4e9e4) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083540Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43722272n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-423958255-1300105827-4093915838-22141448176/1/2021 12:36:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 194516EF-0A63-4D7E-BE32-04F4312BF983--28337099-8302-4960-8090-6C25C6B0F165 (Friendly Name: ).2330400-92233720368547758083539Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43722272n-h2-773644-4.cbci-773644-4.local6/1/2021 12:36:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E62B25F7-598D-4D08-B650-F379FDC3DD93--1F761465-3C7C-4DCA-84D7-C6380F6E6CCC (Friendly Name: 44ca91a7-0ea4-4b97-b045-bc600cefa66c).2330400-92233720368547758083538Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18642852n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3861587447-1292392845-2045989046-24807843816/1/2021 12:36:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E62B25F7-598D-4D08-B650-F379FDC3DD93--1F761465-3C7C-4DCA-84D7-C6380F6E6CCC successfully disconnected from port .2340400-92233720368547758083537Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18642852n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3861587447-1292392845-2045989046-24807843816/1/2021 12:36:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E62B25F7-598D-4D08-B650-F379FDC3DD93--1F761465-3C7C-4DCA-84D7-C6380F6E6CCC (Friendly Name: 44ca91a7-0ea4-4b97-b045-bc600cefa66c) successfully connected to port 06EAC2DC-4CB1-416B-8CF9-00A07C8E14FD (Friendly Name: 44ca91a7-0ea4-4b97-b045-bc600cefa66c) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083536Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18641196n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3861587447-1292392845-2045989046-24807843816/1/2021 12:35:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E62B25F7-598D-4D08-B650-F379FDC3DD93--1F761465-3C7C-4DCA-84D7-C6380F6E6CCC (Friendly Name: ).2330400-92233720368547758083535Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18641196n-h2-773644-4.cbci-773644-4.local6/1/2021 12:35:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403534Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 12:35:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403533Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 12:35:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 42E24B6A-D214-4E7D-9B4C-3B5B4751EDB9--204D59EC-A98C-4CF8-AE70-BBB3D01180E6 (Friendly Name: 617a915e-58a7-4ec7-83a4-ed4d39353f82).2330400-92233720368547758083532Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5416584n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1122126698-1316868628-1530612891-31193377996/1/2021 12:33:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 42E24B6A-D214-4E7D-9B4C-3B5B4751EDB9--204D59EC-A98C-4CF8-AE70-BBB3D01180E6 successfully disconnected from port .2340400-92233720368547758083531Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5416584n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1122126698-1316868628-1530612891-31193377996/1/2021 12:33:22 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-07-06-E8 has moved from port 63707F6E-6209-4070-84CE-5012CFD3C128 (Friendly Name: 617a915e-58a7-4ec7-83a4-ed4d39353f82) to port 63707F6E-6209-4070-84CE-5012CFD3C128 (Friendly Name: 617a915e-58a7-4ec7-83a4-ed4d39353f82).250410180-92233720368547758083530Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284664n-h2-773644-4.cbci-773644-4.local6/1/2021 12:33:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-07-06-E8 has moved from port 646218F0-F3AE-467D-8B40-4F59F54AD02E (Friendly Name: br-data_External) to port 63707F6E-6209-4070-84CE-5012CFD3C128 (Friendly Name: 617a915e-58a7-4ec7-83a4-ed4d39353f82).250410180-92233720368547758083529Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284664n-h2-773644-4.cbci-773644-4.local6/1/2021 12:33:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 42E24B6A-D214-4E7D-9B4C-3B5B4751EDB9--204D59EC-A98C-4CF8-AE70-BBB3D01180E6 (Friendly Name: 617a915e-58a7-4ec7-83a4-ed4d39353f82) successfully connected to port 63707F6E-6209-4070-84CE-5012CFD3C128 (Friendly Name: 617a915e-58a7-4ec7-83a4-ed4d39353f82) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083528Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5416584n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1122126698-1316868628-1530612891-31193377996/1/2021 12:33:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403527Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 12:33:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 42E24B6A-D214-4E7D-9B4C-3B5B4751EDB9--204D59EC-A98C-4CF8-AE70-BBB3D01180E6 (Friendly Name: ).2330400-92233720368547758083526Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54161324n-h2-773644-4.cbci-773644-4.local6/1/2021 12:33:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A0040FAD-16A4-46D9-B851-EEB545C8B5F7--5B234DDC-9217-4DDC-A0F8-A518EC4D9F9E (Friendly Name: 3bdc20d8-c28d-4471-adc7-ef3f9e65073e).2330400-92233720368547758083525Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56925736n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2684620717-1188632228-3052294584-41558856376/1/2021 12:32:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0040FAD-16A4-46D9-B851-EEB545C8B5F7--5B234DDC-9217-4DDC-A0F8-A518EC4D9F9E successfully disconnected from port .2340400-92233720368547758083524Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56925736n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2684620717-1188632228-3052294584-41558856376/1/2021 12:32:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403523Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 12:32:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0040FAD-16A4-46D9-B851-EEB545C8B5F7--5B234DDC-9217-4DDC-A0F8-A518EC4D9F9E (Friendly Name: 3bdc20d8-c28d-4471-adc7-ef3f9e65073e) successfully connected to port E4459651-D7AC-4A45-85AE-B5155A83F350 (Friendly Name: 3bdc20d8-c28d-4471-adc7-ef3f9e65073e) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083522Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56925288n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2684620717-1188632228-3052294584-41558856376/1/2021 12:32:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A0040FAD-16A4-46D9-B851-EEB545C8B5F7--5B234DDC-9217-4DDC-A0F8-A518EC4D9F9E (Friendly Name: ).2330400-92233720368547758083521Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56925288n-h2-773644-4.cbci-773644-4.local6/1/2021 12:32:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A0040FAD-16A4-46D9-B851-EEB545C8B5F7--5B234DDC-9217-4DDC-A0F8-A518EC4D9F9E (Friendly Name: 3bdc20d8-c28d-4471-adc7-ef3f9e65073e).2330400-92233720368547758083520Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53765600n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2684620717-1188632228-3052294584-41558856376/1/2021 12:32:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0040FAD-16A4-46D9-B851-EEB545C8B5F7--5B234DDC-9217-4DDC-A0F8-A518EC4D9F9E successfully disconnected from port .2340400-92233720368547758083519Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53765600n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2684620717-1188632228-3052294584-41558856376/1/2021 12:32:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0040FAD-16A4-46D9-B851-EEB545C8B5F7--5B234DDC-9217-4DDC-A0F8-A518EC4D9F9E (Friendly Name: 3bdc20d8-c28d-4471-adc7-ef3f9e65073e) successfully connected to port E4459651-D7AC-4A45-85AE-B5155A83F350 (Friendly Name: 3bdc20d8-c28d-4471-adc7-ef3f9e65073e) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083518Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53765600n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2684620717-1188632228-3052294584-41558856376/1/2021 12:32:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A0040FAD-16A4-46D9-B851-EEB545C8B5F7--5B234DDC-9217-4DDC-A0F8-A518EC4D9F9E (Friendly Name: ).2330400-92233720368547758083517Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem53765600n-h2-773644-4.cbci-773644-4.local6/1/2021 12:32:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A0040FAD-16A4-46D9-B851-EEB545C8B5F7--5B234DDC-9217-4DDC-A0F8-A518EC4D9F9E (Friendly Name: 3bdc20d8-c28d-4471-adc7-ef3f9e65073e).2330400-92233720368547758083516Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46964204n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2684620717-1188632228-3052294584-41558856376/1/2021 12:32:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0040FAD-16A4-46D9-B851-EEB545C8B5F7--5B234DDC-9217-4DDC-A0F8-A518EC4D9F9E successfully disconnected from port .2340400-92233720368547758083515Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46964204n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2684620717-1188632228-3052294584-41558856376/1/2021 12:32:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0040FAD-16A4-46D9-B851-EEB545C8B5F7--5B234DDC-9217-4DDC-A0F8-A518EC4D9F9E (Friendly Name: 3bdc20d8-c28d-4471-adc7-ef3f9e65073e) successfully connected to port E4459651-D7AC-4A45-85AE-B5155A83F350 (Friendly Name: 3bdc20d8-c28d-4471-adc7-ef3f9e65073e) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083514Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46961756n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2684620717-1188632228-3052294584-41558856376/1/2021 12:32:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A0040FAD-16A4-46D9-B851-EEB545C8B5F7--5B234DDC-9217-4DDC-A0F8-A518EC4D9F9E (Friendly Name: ).2330400-92233720368547758083513Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46961756n-h2-773644-4.cbci-773644-4.local6/1/2021 12:32:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 9FEDD868-7410-4E21-B8F7-3E68987D64B5--08BFDC72-7A5A-43FB-838E-CA066234D5D8 (Friendly Name: 1899a395-a2f9-4b7f-82d5-3a7e3988f10a).2330400-92233720368547758083512Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18564528n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2683164776-1310815248-1748957112-30432618486/1/2021 12:32:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9FEDD868-7410-4E21-B8F7-3E68987D64B5--08BFDC72-7A5A-43FB-838E-CA066234D5D8 successfully disconnected from port .2340400-92233720368547758083511Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18564528n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2683164776-1310815248-1748957112-30432618486/1/2021 12:32:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9FEDD868-7410-4E21-B8F7-3E68987D64B5--08BFDC72-7A5A-43FB-838E-CA066234D5D8 (Friendly Name: 1899a395-a2f9-4b7f-82d5-3a7e3988f10a) successfully connected to port 64444305-22DB-46A9-AD9A-C3CEC28E3D87 (Friendly Name: 1899a395-a2f9-4b7f-82d5-3a7e3988f10a) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083510Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18564932n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2683164776-1310815248-1748957112-30432618486/1/2021 12:30:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 9FEDD868-7410-4E21-B8F7-3E68987D64B5--08BFDC72-7A5A-43FB-838E-CA066234D5D8 (Friendly Name: ).2330400-92233720368547758083509Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18564932n-h2-773644-4.cbci-773644-4.local6/1/2021 12:30:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 9FEDD868-7410-4E21-B8F7-3E68987D64B5--08BFDC72-7A5A-43FB-838E-CA066234D5D8 (Friendly Name: 1899a395-a2f9-4b7f-82d5-3a7e3988f10a).2330400-92233720368547758083508Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12365468n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2683164776-1310815248-1748957112-30432618486/1/2021 12:30:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9FEDD868-7410-4E21-B8F7-3E68987D64B5--08BFDC72-7A5A-43FB-838E-CA066234D5D8 successfully disconnected from port .2340400-92233720368547758083507Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12365468n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2683164776-1310815248-1748957112-30432618486/1/2021 12:30:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403506Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 12:30:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9FEDD868-7410-4E21-B8F7-3E68987D64B5--08BFDC72-7A5A-43FB-838E-CA066234D5D8 (Friendly Name: 1899a395-a2f9-4b7f-82d5-3a7e3988f10a) successfully connected to port 64444305-22DB-46A9-AD9A-C3CEC28E3D87 (Friendly Name: 1899a395-a2f9-4b7f-82d5-3a7e3988f10a) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083505Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12365468n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2683164776-1310815248-1748957112-30432618486/1/2021 12:30:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 9FEDD868-7410-4E21-B8F7-3E68987D64B5--08BFDC72-7A5A-43FB-838E-CA066234D5D8 (Friendly Name: ).2330400-92233720368547758083504Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12365468n-h2-773644-4.cbci-773644-4.local6/1/2021 12:30:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E2BF8F2B-08C6-4577-88D0-70CE5671C41C--54358D8A-F4ED-4A0D-9EAE-24D07EB09CA3 (Friendly Name: b4ae6118-f4f3-4488-91f2-99f81183efad).2330400-92233720368547758083503Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3328140n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3804204843-1165428934-3463499912-4826361186/1/2021 12:30:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E2BF8F2B-08C6-4577-88D0-70CE5671C41C--54358D8A-F4ED-4A0D-9EAE-24D07EB09CA3 successfully disconnected from port .2340400-92233720368547758083502Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3328140n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3804204843-1165428934-3463499912-4826361186/1/2021 12:30:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-56-E4-E7 has moved from port 9766EFB6-777E-4A27-B0E2-A211C2F78F5A (Friendly Name: b4ae6118-f4f3-4488-91f2-99f81183efad) to port 9766EFB6-777E-4A27-B0E2-A211C2F78F5A (Friendly Name: b4ae6118-f4f3-4488-91f2-99f81183efad).250410180-92233720368547758083501Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284664n-h2-773644-4.cbci-773644-4.local6/1/2021 12:29:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-56-E4-E7 has moved from port 646218F0-F3AE-467D-8B40-4F59F54AD02E (Friendly Name: br-data_External) to port 9766EFB6-777E-4A27-B0E2-A211C2F78F5A (Friendly Name: b4ae6118-f4f3-4488-91f2-99f81183efad).250410180-92233720368547758083500Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25285960n-h2-773644-4.cbci-773644-4.local6/1/2021 12:29:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E2BF8F2B-08C6-4577-88D0-70CE5671C41C--54358D8A-F4ED-4A0D-9EAE-24D07EB09CA3 (Friendly Name: b4ae6118-f4f3-4488-91f2-99f81183efad) successfully connected to port 9766EFB6-777E-4A27-B0E2-A211C2F78F5A (Friendly Name: b4ae6118-f4f3-4488-91f2-99f81183efad) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083499Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33285244n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3804204843-1165428934-3463499912-4826361186/1/2021 12:29:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403498Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 12:29:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E2BF8F2B-08C6-4577-88D0-70CE5671C41C--54358D8A-F4ED-4A0D-9EAE-24D07EB09CA3 (Friendly Name: ).2330400-92233720368547758083497Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3328140n-h2-773644-4.cbci-773644-4.local6/1/2021 12:29:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403496Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 12:29:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EAB038EF-B9BB-4419-AE1E-346ACF89493C--3DD4567E-605E-40FA-BB96-1572EF1B3AF0 (Friendly Name: 7921528d-8add-41d4-920b-5be6ff63ec99).2330400-92233720368547758083495Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61161484n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3937417455-1142536635-1781800622-10114523676/1/2021 12:29:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EAB038EF-B9BB-4419-AE1E-346ACF89493C--3DD4567E-605E-40FA-BB96-1572EF1B3AF0 successfully disconnected from port .2340400-92233720368547758083494Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61161484n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3937417455-1142536635-1781800622-10114523676/1/2021 12:29:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B34F5728-B681-44E4-A330-4CAF4440CBE6--B2322A03-B15E-4511-B6DC-D5E8C49423E2 (Friendly Name: 3c55d04a-dd31-4003-968b-c29f185efddf).2330400-92233720368547758083493Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56884512n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3008321320-1155839617-2941005987-38720799406/1/2021 12:28:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B34F5728-B681-44E4-A330-4CAF4440CBE6--B2322A03-B15E-4511-B6DC-D5E8C49423E2 successfully disconnected from port .2340400-92233720368547758083492Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56884512n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3008321320-1155839617-2941005987-38720799406/1/2021 12:28:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403491Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h2-773644-4.cbci-773644-4.local6/1/2021 12:28:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 47E5E0A2-E530-47C5-A01C-552C65056329--DACCE7A0-6A78-4324-BAF4-7EFDD5FB8192 (Friendly Name: 73ca5718-8f85-4a5e-a200-f71fcce4aafe).2330400-92233720368547758083490Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59843312n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1206247586-1204151600-743775392-6943553016/1/2021 12:28:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 47E5E0A2-E530-47C5-A01C-552C65056329--DACCE7A0-6A78-4324-BAF4-7EFDD5FB8192 successfully disconnected from port .2340400-92233720368547758083489Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59843312n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1206247586-1204151600-743775392-6943553016/1/2021 12:28:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403488Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h2-773644-4.cbci-773644-4.local6/1/2021 12:27:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0BA64796-2694-4694-B660-FBCB2C44946C--21F9F2B8-BCAC-42D0-8FD0-55DA762CAB90 (Friendly Name: 9f084dd5-5335-4d72-89c6-b6ef2c814b1c).2330400-92233720368547758083487Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57003632n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-195446678-1184114324-3422249142-18216561086/1/2021 12:27:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0BA64796-2694-4694-B660-FBCB2C44946C--21F9F2B8-BCAC-42D0-8FD0-55DA762CAB90 successfully disconnected from port .2340400-92233720368547758083486Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57003632n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-195446678-1184114324-3422249142-18216561086/1/2021 12:27:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403485Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:27:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403484Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 12:27:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0BA64796-2694-4694-B660-FBCB2C44946C--21F9F2B8-BCAC-42D0-8FD0-55DA762CAB90 (Friendly Name: 9f084dd5-5335-4d72-89c6-b6ef2c814b1c) successfully connected to port E432F1D5-83D3-4BE3-BD11-8EB1AF9D89BB (Friendly Name: 9f084dd5-5335-4d72-89c6-b6ef2c814b1c) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083483Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57003464n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-195446678-1184114324-3422249142-18216561086/1/2021 12:27:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0BA64796-2694-4694-B660-FBCB2C44946C--21F9F2B8-BCAC-42D0-8FD0-55DA762CAB90 (Friendly Name: ).2330400-92233720368547758083482Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57003464n-h2-773644-4.cbci-773644-4.local6/1/2021 12:27:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EAB038EF-B9BB-4419-AE1E-346ACF89493C--3DD4567E-605E-40FA-BB96-1572EF1B3AF0 (Friendly Name: 7921528d-8add-41d4-920b-5be6ff63ec99) successfully connected to port 1E3ABC4F-14DC-4DD9-86CC-21F48975DC33 (Friendly Name: 7921528d-8add-41d4-920b-5be6ff63ec99) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083481Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61163368n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3937417455-1142536635-1781800622-10114523676/1/2021 12:26:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EAB038EF-B9BB-4419-AE1E-346ACF89493C--3DD4567E-605E-40FA-BB96-1572EF1B3AF0 (Friendly Name: ).2330400-92233720368547758083480Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61163368n-h2-773644-4.cbci-773644-4.local6/1/2021 12:26:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 47E5E0A2-E530-47C5-A01C-552C65056329--DACCE7A0-6A78-4324-BAF4-7EFDD5FB8192 (Friendly Name: 73ca5718-8f85-4a5e-a200-f71fcce4aafe) successfully connected to port 7E7D7BA1-2193-43CC-9054-89B9B57EF8A4 (Friendly Name: 73ca5718-8f85-4a5e-a200-f71fcce4aafe) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083479Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59843820n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1206247586-1204151600-743775392-6943553016/1/2021 12:25:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 47E5E0A2-E530-47C5-A01C-552C65056329--DACCE7A0-6A78-4324-BAF4-7EFDD5FB8192 (Friendly Name: ).2330400-92233720368547758083478Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59843820n-h2-773644-4.cbci-773644-4.local6/1/2021 12:25:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403477Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:25:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B34F5728-B681-44E4-A330-4CAF4440CBE6--B2322A03-B15E-4511-B6DC-D5E8C49423E2 (Friendly Name: 3c55d04a-dd31-4003-968b-c29f185efddf) successfully connected to port B5BACE55-FB35-4FB3-AFEF-65F35510B8E1 (Friendly Name: 3c55d04a-dd31-4003-968b-c29f185efddf) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083476Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56882488n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3008321320-1155839617-2941005987-38720799406/1/2021 12:25:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B34F5728-B681-44E4-A330-4CAF4440CBE6--B2322A03-B15E-4511-B6DC-D5E8C49423E2 (Friendly Name: ).2330400-92233720368547758083475Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56882488n-h2-773644-4.cbci-773644-4.local6/1/2021 12:25:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B1C3E41E-4B08-406D-9748-2548218C98A9--0E0703DF-94E5-4511-BACC-BE7D9079FF91 (Friendly Name: d42a016f-a308-4727-9aa3-7624a3f9a701).2330400-92233720368547758083474Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46683572n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2982405150-1080904456-1210402967-28453468496/1/2021 12:24:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B1C3E41E-4B08-406D-9748-2548218C98A9--0E0703DF-94E5-4511-BACC-BE7D9079FF91 successfully disconnected from port .2340400-92233720368547758083473Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46683572n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2982405150-1080904456-1210402967-28453468496/1/2021 12:24:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B1C3E41E-4B08-406D-9748-2548218C98A9--0E0703DF-94E5-4511-BACC-BE7D9079FF91 (Friendly Name: d42a016f-a308-4727-9aa3-7624a3f9a701) successfully connected to port 3CC83787-8E55-4DC3-B7DA-C66D2CDEDF4D (Friendly Name: d42a016f-a308-4727-9aa3-7624a3f9a701) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083472Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46683264n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2982405150-1080904456-1210402967-28453468496/1/2021 12:24:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B1C3E41E-4B08-406D-9748-2548218C98A9--0E0703DF-94E5-4511-BACC-BE7D9079FF91 (Friendly Name: ).2330400-92233720368547758083471Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46683264n-h2-773644-4.cbci-773644-4.local6/1/2021 12:24:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5E6BCF25-4557-48AA-8EFC-18051ECEDAEC--3C1F4A41-0530-4F5B-8F07-FB3257474299 (Friendly Name: 8b08c488-262b-4e62-999f-d986ec99a89d).2330400-92233720368547758083470Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9963924n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1584123685-1219118423-85523598-39737625906/1/2021 12:24:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5E6BCF25-4557-48AA-8EFC-18051ECEDAEC--3C1F4A41-0530-4F5B-8F07-FB3257474299 successfully disconnected from port .2340400-92233720368547758083469Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9963924n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1584123685-1219118423-85523598-39737625906/1/2021 12:24:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2800EC19-E476-4D5A-9552-493E753C0BF8--36438AD1-C4E8-46AD-930A-00CE1FB0A760 (Friendly Name: f78073dc-ff20-4625-aa25-ab4747911edc).2330400-92233720368547758083468Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57285480n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-671149081-1297802358-1044992661-41614859416/1/2021 12:24:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2800EC19-E476-4D5A-9552-493E753C0BF8--36438AD1-C4E8-46AD-930A-00CE1FB0A760 successfully disconnected from port .2340400-92233720368547758083467Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57285480n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-671149081-1297802358-1044992661-41614859416/1/2021 12:24:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118403466Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:24:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 756D8526-4EE3-4A73-8F16-5F14259FD0E0--E5AB752A-D299-4874-9CC3-C0CADE72485A (Friendly Name: 4862a38d-952a-4b0e-975a-5434500f9652).2330400-92233720368547758083465Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60604372n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1970111782-1249070819-341776015-37717686136/1/2021 12:23:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 756D8526-4EE3-4A73-8F16-5F14259FD0E0--E5AB752A-D299-4874-9CC3-C0CADE72485A successfully disconnected from port .2340400-92233720368547758083464Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60604372n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1970111782-1249070819-341776015-37717686136/1/2021 12:23:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E5FB13E4-67A2-4C16-AFFC-0E5111D324F1--9BCED19E-FA43-4793-B41D-0FA10936E5E6 (Friendly Name: f13f5ed9-7b2a-43b1-b0f4-cc716c173956).2330400-92233720368547758083463Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2316980n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3858437092-1276536738-1359936687-40457223856/1/2021 12:23:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E5FB13E4-67A2-4C16-AFFC-0E5111D324F1--9BCED19E-FA43-4793-B41D-0FA10936E5E6 successfully disconnected from port .2340400-92233720368547758083462Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2316980n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3858437092-1276536738-1359936687-40457223856/1/2021 12:23:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E5FB13E4-67A2-4C16-AFFC-0E5111D324F1--9BCED19E-FA43-4793-B41D-0FA10936E5E6 (Friendly Name: f13f5ed9-7b2a-43b1-b0f4-cc716c173956) successfully connected to port 91AAFACA-E535-47ED-B5CA-0560BA093558 (Friendly Name: f13f5ed9-7b2a-43b1-b0f4-cc716c173956) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083461Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2316612n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3858437092-1276536738-1359936687-40457223856/1/2021 12:23:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E5FB13E4-67A2-4C16-AFFC-0E5111D324F1--9BCED19E-FA43-4793-B41D-0FA10936E5E6 (Friendly Name: ).2330400-92233720368547758083460Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2316612n-h2-773644-4.cbci-773644-4.local6/1/2021 12:23:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 756D8526-4EE3-4A73-8F16-5F14259FD0E0--E5AB752A-D299-4874-9CC3-C0CADE72485A (Friendly Name: 4862a38d-952a-4b0e-975a-5434500f9652) successfully connected to port 0FD4C179-2CC8-4924-9547-E82E08669C85 (Friendly Name: 4862a38d-952a-4b0e-975a-5434500f9652) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083459Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60604372n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1970111782-1249070819-341776015-37717686136/1/2021 12:22:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 756D8526-4EE3-4A73-8F16-5F14259FD0E0--E5AB752A-D299-4874-9CC3-C0CADE72485A (Friendly Name: ).2330400-92233720368547758083458Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60604372n-h2-773644-4.cbci-773644-4.local6/1/2021 12:22:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2800EC19-E476-4D5A-9552-493E753C0BF8--36438AD1-C4E8-46AD-930A-00CE1FB0A760 (Friendly Name: f78073dc-ff20-4625-aa25-ab4747911edc) successfully connected to port B38BB03A-6D74-4680-932E-3798805790C7 (Friendly Name: f78073dc-ff20-4625-aa25-ab4747911edc) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083457Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57285480n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-671149081-1297802358-1044992661-41614859416/1/2021 12:22:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2800EC19-E476-4D5A-9552-493E753C0BF8--36438AD1-C4E8-46AD-930A-00CE1FB0A760 (Friendly Name: ).2330400-92233720368547758083456Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57285480n-h2-773644-4.cbci-773644-4.local6/1/2021 12:22:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1D60D5CB-F8A3-42E5-BDE0-D8C6FE4F433B--1FEA6E53-89E1-4CBD-9E0C-53E9D86344FD (Friendly Name: 91133f63-e838-47cf-a87f-12dacd46b806).2330400-92233720368547758083455Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5644936n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-492885451-1122367651-3336102077-9942671346/1/2021 12:21:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1D60D5CB-F8A3-42E5-BDE0-D8C6FE4F433B--1FEA6E53-89E1-4CBD-9E0C-53E9D86344FD successfully disconnected from port .2340400-92233720368547758083454Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5644936n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-492885451-1122367651-3336102077-9942671346/1/2021 12:21:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1D60D5CB-F8A3-42E5-BDE0-D8C6FE4F433B--1FEA6E53-89E1-4CBD-9E0C-53E9D86344FD (Friendly Name: 91133f63-e838-47cf-a87f-12dacd46b806) successfully connected to port ED3B48D1-2293-4E40-99D4-6B4368AC415C (Friendly Name: 91133f63-e838-47cf-a87f-12dacd46b806) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083453Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56442788n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-492885451-1122367651-3336102077-9942671346/1/2021 12:21:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1D60D5CB-F8A3-42E5-BDE0-D8C6FE4F433B--1FEA6E53-89E1-4CBD-9E0C-53E9D86344FD (Friendly Name: ).2330400-92233720368547758083452Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56442788n-h2-773644-4.cbci-773644-4.local6/1/2021 12:21:54 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1AD9CDE7-4A4E-467E-BC81-4E290B5384FC--EFC130F9-636A-44CA-A4C7-A57BA05D1B4E (Friendly Name: 9cb68664-a8f1-491e-8196-a25ce7539e25).2330400-92233720368547758083451Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51884184n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-450481639-1182681678-693010876-42365304436/1/2021 12:21:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1AD9CDE7-4A4E-467E-BC81-4E290B5384FC--EFC130F9-636A-44CA-A4C7-A57BA05D1B4E successfully disconnected from port .2340400-92233720368547758083450Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51884184n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-450481639-1182681678-693010876-42365304436/1/2021 12:21:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403449Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:21:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 55A67C22-C3B4-4D5E-9A03-D60564FB6C0A--DF179260-8D1F-4730-9832-40EEE51B54C9 (Friendly Name: ad238073-d449-4f90-992a-88e19895e482).2330400-92233720368547758083448Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52566136n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1436974114-1298056116-97911706-1749144046/1/2021 12:21:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 55A67C22-C3B4-4D5E-9A03-D60564FB6C0A--DF179260-8D1F-4730-9832-40EEE51B54C9 successfully disconnected from port .2340400-92233720368547758083447Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52566136n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1436974114-1298056116-97911706-1749144046/1/2021 12:21:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1AD9CDE7-4A4E-467E-BC81-4E290B5384FC--EFC130F9-636A-44CA-A4C7-A57BA05D1B4E (Friendly Name: 9cb68664-a8f1-491e-8196-a25ce7539e25) successfully connected to port 18C8FE22-67F2-40AD-ACA1-F58865F01DE1 (Friendly Name: 9cb68664-a8f1-491e-8196-a25ce7539e25) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083446Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51884184n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-450481639-1182681678-693010876-42365304436/1/2021 12:21:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1AD9CDE7-4A4E-467E-BC81-4E290B5384FC--EFC130F9-636A-44CA-A4C7-A57BA05D1B4E (Friendly Name: ).2330400-92233720368547758083445Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51884184n-h2-773644-4.cbci-773644-4.local6/1/2021 12:21:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1AD9CDE7-4A4E-467E-BC81-4E290B5384FC--EFC130F9-636A-44CA-A4C7-A57BA05D1B4E (Friendly Name: 9cb68664-a8f1-491e-8196-a25ce7539e25).2330400-92233720368547758083444Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51884184n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-450481639-1182681678-693010876-42365304436/1/2021 12:21:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1AD9CDE7-4A4E-467E-BC81-4E290B5384FC--EFC130F9-636A-44CA-A4C7-A57BA05D1B4E successfully disconnected from port .2340400-92233720368547758083443Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51884184n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-450481639-1182681678-693010876-42365304436/1/2021 12:21:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1AD9CDE7-4A4E-467E-BC81-4E290B5384FC--EFC130F9-636A-44CA-A4C7-A57BA05D1B4E (Friendly Name: 9cb68664-a8f1-491e-8196-a25ce7539e25) successfully connected to port 18C8FE22-67F2-40AD-ACA1-F58865F01DE1 (Friendly Name: 9cb68664-a8f1-491e-8196-a25ce7539e25) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083442Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51884920n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-450481639-1182681678-693010876-42365304436/1/2021 12:21:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1AD9CDE7-4A4E-467E-BC81-4E290B5384FC--EFC130F9-636A-44CA-A4C7-A57BA05D1B4E (Friendly Name: ).2330400-92233720368547758083441Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51884920n-h2-773644-4.cbci-773644-4.local6/1/2021 12:21:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 8531DAC8-50AF-4A06-96A2-3C817F811344--D2B9B543-0EEB-409E-9000-9A12F02588F7 (Friendly Name: 4dd39e4b-0977-44cb-a606-14bf763090c5).2330400-92233720368547758083440Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55762080n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2234637000-1241927855-2168234646-11421290236/1/2021 12:21:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8531DAC8-50AF-4A06-96A2-3C817F811344--D2B9B543-0EEB-409E-9000-9A12F02588F7 successfully disconnected from port .2340400-92233720368547758083439Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55762080n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2234637000-1241927855-2168234646-11421290236/1/2021 12:21:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 52EFF616-0EB7-4C24-9576-F92590B0458F--4A6E3792-84AD-4C05-9BEF-509D3E065CA7 (Friendly Name: 6aae6e1e-d3ed-497a-8238-f97567fc7691).2330400-92233720368547758083438Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36484696n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1391457814-1277431479-637105813-24037090726/1/2021 12:21:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 52EFF616-0EB7-4C24-9576-F92590B0458F--4A6E3792-84AD-4C05-9BEF-509D3E065CA7 successfully disconnected from port .2340400-92233720368547758083437Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36484696n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1391457814-1277431479-637105813-24037090726/1/2021 12:21:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8531DAC8-50AF-4A06-96A2-3C817F811344--D2B9B543-0EEB-409E-9000-9A12F02588F7 (Friendly Name: 4dd39e4b-0977-44cb-a606-14bf763090c5) successfully connected to port 45BC4033-2CE4-4BF1-A511-6818C6C0A7EF (Friendly Name: 4dd39e4b-0977-44cb-a606-14bf763090c5) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083436Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55762080n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2234637000-1241927855-2168234646-11421290236/1/2021 12:20:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 8531DAC8-50AF-4A06-96A2-3C817F811344--D2B9B543-0EEB-409E-9000-9A12F02588F7 (Friendly Name: ).2330400-92233720368547758083435Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem55762080n-h2-773644-4.cbci-773644-4.local6/1/2021 12:20:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic DD9C089E-47EE-46F0-8238-5D688864A2F9--F85C07F6-C318-416D-B540-5ACC97A2E33C (Friendly Name: 7ec00656-1c57-438f-9c44-b0bdb3c7f65a).2330400-92233720368547758083434Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36525316n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3717990558-1190152174-1750939778-41881693526/1/2021 12:20:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DD9C089E-47EE-46F0-8238-5D688864A2F9--F85C07F6-C318-416D-B540-5ACC97A2E33C successfully disconnected from port .2340400-92233720368547758083433Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36525316n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3717990558-1190152174-1750939778-41881693526/1/2021 12:20:53 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-9C-10-76 has moved from port 646218F0-F3AE-467D-8B40-4F59F54AD02E (Friendly Name: br-data_External) to port 8B811DD1-B8C6-4D88-9648-3C7EE618788F (Friendly Name: 7ec00656-1c57-438f-9c44-b0bdb3c7f65a).250410180-92233720368547758083432Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem00n-h2-773644-4.cbci-773644-4.local6/1/2021 12:20:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3827C096-67F9-4CBA-A2B6-7E68C641A399--57F76FC5-3BDB-41E8-B0EE-91E5D216F819 (Friendly Name: 30ab74c9-4424-451b-a76a-929da0098661).2330400-92233720368547758083431Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10603036n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-942129302-1287284729-1753134754-25776132546/1/2021 12:20:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3827C096-67F9-4CBA-A2B6-7E68C641A399--57F76FC5-3BDB-41E8-B0EE-91E5D216F819 successfully disconnected from port .2340400-92233720368547758083430Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10603036n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-942129302-1287284729-1753134754-25776132546/1/2021 12:20:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DD9C089E-47EE-46F0-8238-5D688864A2F9--F85C07F6-C318-416D-B540-5ACC97A2E33C (Friendly Name: 7ec00656-1c57-438f-9c44-b0bdb3c7f65a) successfully connected to port 8B811DD1-B8C6-4D88-9648-3C7EE618788F (Friendly Name: 7ec00656-1c57-438f-9c44-b0bdb3c7f65a) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083429Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36525316n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3717990558-1190152174-1750939778-41881693526/1/2021 12:20:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic DD9C089E-47EE-46F0-8238-5D688864A2F9--F85C07F6-C318-416D-B540-5ACC97A2E33C (Friendly Name: ).2330400-92233720368547758083428Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36525316n-h2-773644-4.cbci-773644-4.local6/1/2021 12:20:30 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic DD9C089E-47EE-46F0-8238-5D688864A2F9--F85C07F6-C318-416D-B540-5ACC97A2E33C (Friendly Name: 7ec00656-1c57-438f-9c44-b0bdb3c7f65a).2330400-92233720368547758083427Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51445060n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3717990558-1190152174-1750939778-41881693526/1/2021 12:20:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DD9C089E-47EE-46F0-8238-5D688864A2F9--F85C07F6-C318-416D-B540-5ACC97A2E33C successfully disconnected from port .2340400-92233720368547758083426Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51445060n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3717990558-1190152174-1750939778-41881693526/1/2021 12:20:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5E6BCF25-4557-48AA-8EFC-18051ECEDAEC--3C1F4A41-0530-4F5B-8F07-FB3257474299 (Friendly Name: 8b08c488-262b-4e62-999f-d986ec99a89d) successfully connected to port 363FB8BD-78B6-4CC7-97D2-73CAC2F80E17 (Friendly Name: 8b08c488-262b-4e62-999f-d986ec99a89d) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083425Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9964924n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1584123685-1219118423-85523598-39737625906/1/2021 12:20:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5E6BCF25-4557-48AA-8EFC-18051ECEDAEC--3C1F4A41-0530-4F5B-8F07-FB3257474299 (Friendly Name: ).2330400-92233720368547758083424Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9964924n-h2-773644-4.cbci-773644-4.local6/1/2021 12:20:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3827C096-67F9-4CBA-A2B6-7E68C641A399--57F76FC5-3BDB-41E8-B0EE-91E5D216F819 (Friendly Name: 30ab74c9-4424-451b-a76a-929da0098661) successfully connected to port 6A0A21A8-0B3A-471D-99DF-915D84D84CBA (Friendly Name: 30ab74c9-4424-451b-a76a-929da0098661) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083423Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10603036n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-942129302-1287284729-1753134754-25776132546/1/2021 12:20:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3827C096-67F9-4CBA-A2B6-7E68C641A399--57F76FC5-3BDB-41E8-B0EE-91E5D216F819 (Friendly Name: ).2330400-92233720368547758083422Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10603036n-h2-773644-4.cbci-773644-4.local6/1/2021 12:20:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 52EFF616-0EB7-4C24-9576-F92590B0458F--4A6E3792-84AD-4C05-9BEF-509D3E065CA7 (Friendly Name: 6aae6e1e-d3ed-497a-8238-f97567fc7691) successfully connected to port BBE6BF5F-C172-41BA-9025-E1D24EC490B8 (Friendly Name: 6aae6e1e-d3ed-497a-8238-f97567fc7691) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083421Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36484352n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1391457814-1277431479-637105813-24037090726/1/2021 12:20:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 52EFF616-0EB7-4C24-9576-F92590B0458F--4A6E3792-84AD-4C05-9BEF-509D3E065CA7 (Friendly Name: ).2330400-92233720368547758083420Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36484352n-h2-773644-4.cbci-773644-4.local6/1/2021 12:20:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DD9C089E-47EE-46F0-8238-5D688864A2F9--F85C07F6-C318-416D-B540-5ACC97A2E33C (Friendly Name: 7ec00656-1c57-438f-9c44-b0bdb3c7f65a) successfully connected to port 8B811DD1-B8C6-4D88-9648-3C7EE618788F (Friendly Name: 7ec00656-1c57-438f-9c44-b0bdb3c7f65a) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083419Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51443940n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3717990558-1190152174-1750939778-41881693526/1/2021 12:20:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic DD9C089E-47EE-46F0-8238-5D688864A2F9--F85C07F6-C318-416D-B540-5ACC97A2E33C (Friendly Name: ).2330400-92233720368547758083418Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51443940n-h2-773644-4.cbci-773644-4.local6/1/2021 12:20:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2620F23F-9098-43EF-A7FC-3C0BC3DE3954--8F2205A6-00A6-419F-AA0A-078D03032A0F (Friendly Name: c4de720a-d3cf-4a74-bca9-f19326cee7cd).2330400-92233720368547758083417Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60124308n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-639693375-1139773592-188546215-14130787236/1/2021 12:19:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2620F23F-9098-43EF-A7FC-3C0BC3DE3954--8F2205A6-00A6-419F-AA0A-078D03032A0F successfully disconnected from port .2340400-92233720368547758083416Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60124308n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-639693375-1139773592-188546215-14130787236/1/2021 12:19:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Disk 1 has been surprise removed.1573277230360287970189639683415DiskSystemn-h2-773644-4.cbci-773644-4.local6/1/2021 12:19:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403414Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 12:19:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--0D0D870C-8C43-4CC5-A6DB-81ABC8CC41AD (Friendly Name: 943c7b96-dbc9-48c9-8ec6-af82fe135c5d).2330400-92233720368547758083413Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--0D0D870C-8C43-4CC5-A6DB-81ABC8CC41AD successfully disconnected from port .2340400-92233720368547758083412Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--F8A4D225-D863-47BC-99CF-2FE1DB4EC723 (Friendly Name: 2152272f-2588-4520-81ee-f113f05d7922).2330400-92233720368547758083411Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--F8A4D225-D863-47BC-99CF-2FE1DB4EC723 successfully disconnected from port .2340400-92233720368547758083410Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--9993EA0D-23F7-4611-A3B3-07A23471E017 (Friendly Name: 00810f20-c4ee-417a-93d5-a0af7f03e030).2330400-92233720368547758083409Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--9993EA0D-23F7-4611-A3B3-07A23471E017 successfully disconnected from port .2340400-92233720368547758083408Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--0280EC3A-332E-45F2-97BE-839688DB30AC (Friendly Name: 608ce9c1-191b-4f3f-9cac-befa0913ec50).2330400-92233720368547758083407Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--0280EC3A-332E-45F2-97BE-839688DB30AC successfully disconnected from port .2340400-92233720368547758083406Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--0C693B9E-4F04-49FA-BD27-41F2B458B81E (Friendly Name: 722024bf-6568-48d4-8c34-7a25ec14df4f).2330400-92233720368547758083405Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--0C693B9E-4F04-49FA-BD27-41F2B458B81E successfully disconnected from port .2340400-92233720368547758083404Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--1BADD202-79FC-4790-BCB5-4727CCADB80B (Friendly Name: 2eb63327-02d6-4b63-8ff0-f74d237f0cbd).2330400-92233720368547758083403Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--1BADD202-79FC-4790-BCB5-4727CCADB80B successfully disconnected from port .2340400-92233720368547758083402Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--4745C8A6-A8BB-4EC9-B613-8389F40F7390 (Friendly Name: 6d79d3c8-fbd2-474e-bc3d-dfc4ce7cfeda).2330400-92233720368547758083401Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--4745C8A6-A8BB-4EC9-B613-8389F40F7390 successfully disconnected from port .2340400-92233720368547758083400Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41722388n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:19:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C825B076-84E1-41F0-8F8A-7604D1ABD8CF--5E1EEFAB-459A-43A3-B8D3-D1E447702B76 (Friendly Name: 60c49f88-9150-48ea-b699-46396de3d0b5).2330400-92233720368547758083399Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45923396n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3357913206-1106281697-74877583-34870834736/1/2021 12:19:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C825B076-84E1-41F0-8F8A-7604D1ABD8CF--5E1EEFAB-459A-43A3-B8D3-D1E447702B76 successfully disconnected from port .2340400-92233720368547758083398Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45923396n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3357913206-1106281697-74877583-34870834736/1/2021 12:19:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2620F23F-9098-43EF-A7FC-3C0BC3DE3954--8F2205A6-00A6-419F-AA0A-078D03032A0F (Friendly Name: c4de720a-d3cf-4a74-bca9-f19326cee7cd) successfully connected to port AC83E66E-A0A1-476A-8004-EEA9D625952C (Friendly Name: c4de720a-d3cf-4a74-bca9-f19326cee7cd) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083397Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60124308n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-639693375-1139773592-188546215-14130787236/1/2021 12:19:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2620F23F-9098-43EF-A7FC-3C0BC3DE3954--8F2205A6-00A6-419F-AA0A-078D03032A0F (Friendly Name: ).2330400-92233720368547758083396Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60124308n-h2-773644-4.cbci-773644-4.local6/1/2021 12:19:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C825B076-84E1-41F0-8F8A-7604D1ABD8CF--5E1EEFAB-459A-43A3-B8D3-D1E447702B76 (Friendly Name: 60c49f88-9150-48ea-b699-46396de3d0b5) successfully connected to port 3309DC7D-5A0B-473E-BC2D-34F06C3D0B0C (Friendly Name: 60c49f88-9150-48ea-b699-46396de3d0b5) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083395Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4592940n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3357913206-1106281697-74877583-34870834736/1/2021 12:19:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C825B076-84E1-41F0-8F8A-7604D1ABD8CF--5E1EEFAB-459A-43A3-B8D3-D1E447702B76 (Friendly Name: ).2330400-92233720368547758083394Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4592940n-h2-773644-4.cbci-773644-4.local6/1/2021 12:19:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CC537DE6-BD94-436C-A80C-BC5A672F2425--DC28CEA6-F0E6-4EDC-935C-3C31466DB5CC (Friendly Name: 65aaf6cf-8683-46f4-a135-5f99e1a9f3e8).2330400-92233720368547758083393Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61405160n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3428023782-1131199892-1522273448-6231284236/1/2021 12:19:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CC537DE6-BD94-436C-A80C-BC5A672F2425--DC28CEA6-F0E6-4EDC-935C-3C31466DB5CC successfully disconnected from port .2340400-92233720368547758083392Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61405160n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3428023782-1131199892-1522273448-6231284236/1/2021 12:19:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CAF29DBF-D20D-49DC-B839-9A983DCBC505--415B32A3-CBA6-427B-B134-12D937FB3DBA (Friendly Name: 6aae6e1e-d3ed-497a-8238-f97567fc7691).2330400-92233720368547758083391Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31442076n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3404897727-1239208461-2560244152-968487016/1/2021 12:19:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CAF29DBF-D20D-49DC-B839-9A983DCBC505--415B32A3-CBA6-427B-B134-12D937FB3DBA successfully disconnected from port .2340400-92233720368547758083390Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31442076n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3404897727-1239208461-2560244152-968487016/1/2021 12:19:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CC537DE6-BD94-436C-A80C-BC5A672F2425--DC28CEA6-F0E6-4EDC-935C-3C31466DB5CC (Friendly Name: 65aaf6cf-8683-46f4-a135-5f99e1a9f3e8) successfully connected to port 975421F4-AB97-4B1B-9D0F-0953E36C6070 (Friendly Name: 65aaf6cf-8683-46f4-a135-5f99e1a9f3e8) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083389Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61405160n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3428023782-1131199892-1522273448-6231284236/1/2021 12:19:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CC537DE6-BD94-436C-A80C-BC5A672F2425--DC28CEA6-F0E6-4EDC-935C-3C31466DB5CC (Friendly Name: ).2330400-92233720368547758083388Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61405160n-h2-773644-4.cbci-773644-4.local6/1/2021 12:19:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 575C8DF6-745E-47A7-ABFD-9CDFB01B5895--649F5D96-A196-4117-B25E-1FB9BB6CCA6F (Friendly Name: 77b94454-ffae-4c97-831b-fff42c342dfc).2330400-92233720368547758083387Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35525676n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1465683446-1202156638-3751607723-25055794406/1/2021 12:18:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 575C8DF6-745E-47A7-ABFD-9CDFB01B5895--649F5D96-A196-4117-B25E-1FB9BB6CCA6F successfully disconnected from port .2340400-92233720368547758083386Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35525676n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1465683446-1202156638-3751607723-25055794406/1/2021 12:18:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 575C8DF6-745E-47A7-ABFD-9CDFB01B5895--649F5D96-A196-4117-B25E-1FB9BB6CCA6F (Friendly Name: 77b94454-ffae-4c97-831b-fff42c342dfc) successfully connected to port 2A528811-ADC9-4125-A17D-EDDBB460E849 (Friendly Name: 77b94454-ffae-4c97-831b-fff42c342dfc) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083385Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35525676n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1465683446-1202156638-3751607723-25055794406/1/2021 12:18:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 575C8DF6-745E-47A7-ABFD-9CDFB01B5895--649F5D96-A196-4117-B25E-1FB9BB6CCA6F (Friendly Name: ).2330400-92233720368547758083384Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35525676n-h2-773644-4.cbci-773644-4.local6/1/2021 12:18:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 8B0FF0AC-35A7-4377-99F8-5999650DAE28--3F20AFCC-21DB-4A93-A477-E806E30160B8 (Friendly Name: 80417143-047d-4bee-bfda-1187aa8472c6).2330400-92233720368547758083383Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43842548n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2333077676-1131885991-2572810393-6824953336/1/2021 12:17:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8B0FF0AC-35A7-4377-99F8-5999650DAE28--3F20AFCC-21DB-4A93-A477-E806E30160B8 successfully disconnected from port .2340400-92233720368547758083382Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43842548n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2333077676-1131885991-2572810393-6824953336/1/2021 12:17:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 8B0FF0AC-35A7-4377-99F8-5999650DAE28--3F20AFCC-21DB-4A93-A477-E806E30160B8 (Friendly Name: 80417143-047d-4bee-bfda-1187aa8472c6) successfully connected to port BDD09298-8D12-4186-8E50-83BC6FBCDD54 (Friendly Name: 80417143-047d-4bee-bfda-1187aa8472c6) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083381Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43842548n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2333077676-1131885991-2572810393-6824953336/1/2021 12:17:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 8B0FF0AC-35A7-4377-99F8-5999650DAE28--3F20AFCC-21DB-4A93-A477-E806E30160B8 (Friendly Name: ).2330400-92233720368547758083380Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43842548n-h2-773644-4.cbci-773644-4.local6/1/2021 12:17:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CAF29DBF-D20D-49DC-B839-9A983DCBC505--415B32A3-CBA6-427B-B134-12D937FB3DBA (Friendly Name: 6aae6e1e-d3ed-497a-8238-f97567fc7691) successfully connected to port 27842486-636C-4BF5-956F-46F24817C552 (Friendly Name: 6aae6e1e-d3ed-497a-8238-f97567fc7691) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083379Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31445996n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3404897727-1239208461-2560244152-968487016/1/2021 12:17:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CAF29DBF-D20D-49DC-B839-9A983DCBC505--415B32A3-CBA6-427B-B134-12D937FB3DBA (Friendly Name: ).2330400-92233720368547758083378Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31445996n-h2-773644-4.cbci-773644-4.local6/1/2021 12:17:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AB4E89C7-F4AC-4CB6-8F50-43C02364E215--F3464538-89C8-4A50-9127-FC646BC22938 (Friendly Name: 19ce14e6-707d-4962-bf66-87f08e42fc45).2330400-92233720368547758083377Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54725536n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2874051015-1287058604-3225637007-3671583076/1/2021 12:17:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AB4E89C7-F4AC-4CB6-8F50-43C02364E215--F3464538-89C8-4A50-9127-FC646BC22938 successfully disconnected from port .2340400-92233720368547758083376Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54725536n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2874051015-1287058604-3225637007-3671583076/1/2021 12:17:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 55A67C22-C3B4-4D5E-9A03-D60564FB6C0A--DF179260-8D1F-4730-9832-40EEE51B54C9 (Friendly Name: ad238073-d449-4f90-992a-88e19895e482) successfully connected to port 139B8F5E-52B3-496D-8A52-54E09D0490B4 (Friendly Name: ad238073-d449-4f90-992a-88e19895e482) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083375Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52565268n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1436974114-1298056116-97911706-1749144046/1/2021 12:17:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 55A67C22-C3B4-4D5E-9A03-D60564FB6C0A--DF179260-8D1F-4730-9832-40EEE51B54C9 (Friendly Name: ).2330400-92233720368547758083374Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52565268n-h2-773644-4.cbci-773644-4.local6/1/2021 12:17:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AB4E89C7-F4AC-4CB6-8F50-43C02364E215--F3464538-89C8-4A50-9127-FC646BC22938 (Friendly Name: 19ce14e6-707d-4962-bf66-87f08e42fc45) successfully connected to port C898E20B-4DC8-40A6-9807-E5232DA7ABD6 (Friendly Name: 19ce14e6-707d-4962-bf66-87f08e42fc45) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083373Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54725536n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2874051015-1287058604-3225637007-3671583076/1/2021 12:17:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AB4E89C7-F4AC-4CB6-8F50-43C02364E215--F3464538-89C8-4A50-9127-FC646BC22938 (Friendly Name: ).2330400-92233720368547758083372Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54725536n-h2-773644-4.cbci-773644-4.local6/1/2021 12:17:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A4535F28-91D9-4306-863B-3EBD1247883D--940BBD7E-AAEE-4A51-A355-4E5E3A4293D7 (Friendly Name: e91bf4c1-90e1-4570-a3bd-0296d26d0338).2330400-92233720368547758083371Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8925136n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2756927272-1124504025-3174972294-10323412666/1/2021 12:16:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A4535F28-91D9-4306-863B-3EBD1247883D--940BBD7E-AAEE-4A51-A355-4E5E3A4293D7 successfully disconnected from port .2340400-92233720368547758083370Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8925136n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2756927272-1124504025-3174972294-10323412666/1/2021 12:16:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A4535F28-91D9-4306-863B-3EBD1247883D--940BBD7E-AAEE-4A51-A355-4E5E3A4293D7 (Friendly Name: e91bf4c1-90e1-4570-a3bd-0296d26d0338) successfully connected to port E8558830-B3C0-4015-8BBA-35913750A624 (Friendly Name: e91bf4c1-90e1-4570-a3bd-0296d26d0338) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083369Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8925652n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2756927272-1124504025-3174972294-10323412666/1/2021 12:16:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A4535F28-91D9-4306-863B-3EBD1247883D--940BBD7E-AAEE-4A51-A355-4E5E3A4293D7 (Friendly Name: ).2330400-92233720368547758083368Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8925652n-h2-773644-4.cbci-773644-4.local6/1/2021 12:16:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403367Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 12:16:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403366Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 12:16:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 62D9E6CB-8A7A-4815-BA24-91D81EF75325--054CB2D9-F1BF-49F0-A818-0EF098074248 (Friendly Name: ae1508b4-6af7-4df9-8692-1f9c21dcfbfc).2330400-92233720368547758083365Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50044780n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1658447563-1209371258-3633390778-6262597426/1/2021 12:16:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 62D9E6CB-8A7A-4815-BA24-91D81EF75325--054CB2D9-F1BF-49F0-A818-0EF098074248 successfully disconnected from port .2340400-92233720368547758083364Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50044780n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1658447563-1209371258-3633390778-6262597426/1/2021 12:16:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D76C7745-164D-430F-89FA-13250694B282--E786A0A6-8A6A-4E74-AE87-4DA503D98716 (Friendly Name: 1a06f04f-84c8-4d77-a81d-ab50543d6cb6).2330400-92233720368547758083363Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24525448n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3614209861-1125062221-622066313-21927413826/1/2021 12:16:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D76C7745-164D-430F-89FA-13250694B282--E786A0A6-8A6A-4E74-AE87-4DA503D98716 successfully disconnected from port .2340400-92233720368547758083362Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24525448n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3614209861-1125062221-622066313-21927413826/1/2021 12:16:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D76C7745-164D-430F-89FA-13250694B282--660F363B-87C2-453C-9526-672777F2B437 (Friendly Name: aa75cf71-4636-4f7d-911f-f7ae7e792a7e).2330400-92233720368547758083361Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24525448n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3614209861-1125062221-622066313-21927413826/1/2021 12:16:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D76C7745-164D-430F-89FA-13250694B282--660F363B-87C2-453C-9526-672777F2B437 successfully disconnected from port .2340400-92233720368547758083360Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24525448n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3614209861-1125062221-622066313-21927413826/1/2021 12:16:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D76C7745-164D-430F-89FA-13250694B282--660F363B-87C2-453C-9526-672777F2B437 (Friendly Name: aa75cf71-4636-4f7d-911f-f7ae7e792a7e) successfully connected to port 673261C5-987E-4FA7-B32D-D83366553E69 (Friendly Name: aa75cf71-4636-4f7d-911f-f7ae7e792a7e) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083359Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24523556n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3614209861-1125062221-622066313-21927413826/1/2021 12:16:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D76C7745-164D-430F-89FA-13250694B282--660F363B-87C2-453C-9526-672777F2B437 (Friendly Name: ).2330400-92233720368547758083358Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24523556n-h2-773644-4.cbci-773644-4.local6/1/2021 12:16:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D76C7745-164D-430F-89FA-13250694B282--E786A0A6-8A6A-4E74-AE87-4DA503D98716 (Friendly Name: 1a06f04f-84c8-4d77-a81d-ab50543d6cb6) successfully connected to port C0087164-68B0-492D-8C07-36C13C24E116 (Friendly Name: 1a06f04f-84c8-4d77-a81d-ab50543d6cb6) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083357Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24523556n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3614209861-1125062221-622066313-21927413826/1/2021 12:16:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D76C7745-164D-430F-89FA-13250694B282--E786A0A6-8A6A-4E74-AE87-4DA503D98716 (Friendly Name: ).2330400-92233720368547758083356Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24523556n-h2-773644-4.cbci-773644-4.local6/1/2021 12:16:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7C0E7FE0-5184-4C7F-B7F9-26B6D462D575--196BE3DC-CDCA-4695-82CF-8D96AAB18813 (Friendly Name: 7a01a932-9da6-4228-b6da-0106ac6dafd9).2330400-92233720368547758083355Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11841476n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2081325024-1283412356-3056007607-19769187406/1/2021 12:15:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7C0E7FE0-5184-4C7F-B7F9-26B6D462D575--196BE3DC-CDCA-4695-82CF-8D96AAB18813 successfully disconnected from port .2340400-92233720368547758083354Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11841476n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2081325024-1283412356-3056007607-19769187406/1/2021 12:15:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7C0E7FE0-5184-4C7F-B7F9-26B6D462D575--45641C05-1093-463C-991D-0E33FEF82009 (Friendly Name: 22570f5b-a40d-426f-8eef-debd3105a632).2330400-92233720368547758083353Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11841476n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2081325024-1283412356-3056007607-19769187406/1/2021 12:15:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7C0E7FE0-5184-4C7F-B7F9-26B6D462D575--45641C05-1093-463C-991D-0E33FEF82009 successfully disconnected from port .2340400-92233720368547758083352Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11841476n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2081325024-1283412356-3056007607-19769187406/1/2021 12:15:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7C0E7FE0-5184-4C7F-B7F9-26B6D462D575--FB89A526-DEA2-45ED-957A-857890D70694 (Friendly Name: 49257f2f-7619-43ca-8db5-0de21c014ac8).2330400-92233720368547758083351Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11841476n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2081325024-1283412356-3056007607-19769187406/1/2021 12:15:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7C0E7FE0-5184-4C7F-B7F9-26B6D462D575--FB89A526-DEA2-45ED-957A-857890D70694 successfully disconnected from port .2340400-92233720368547758083350Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11841476n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2081325024-1283412356-3056007607-19769187406/1/2021 12:15:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7C0E7FE0-5184-4C7F-B7F9-26B6D462D575--FB89A526-DEA2-45ED-957A-857890D70694 (Friendly Name: 49257f2f-7619-43ca-8db5-0de21c014ac8) successfully connected to port DF586E48-CEAF-4449-A286-139A99F6F565 (Friendly Name: 49257f2f-7619-43ca-8db5-0de21c014ac8) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083349Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11841476n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2081325024-1283412356-3056007607-19769187406/1/2021 12:15:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7C0E7FE0-5184-4C7F-B7F9-26B6D462D575--FB89A526-DEA2-45ED-957A-857890D70694 (Friendly Name: ).2330400-92233720368547758083348Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11841476n-h2-773644-4.cbci-773644-4.local6/1/2021 12:15:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7C0E7FE0-5184-4C7F-B7F9-26B6D462D575--45641C05-1093-463C-991D-0E33FEF82009 (Friendly Name: 22570f5b-a40d-426f-8eef-debd3105a632) successfully connected to port 2407B702-E573-4878-956A-C02B89FABEF7 (Friendly Name: 22570f5b-a40d-426f-8eef-debd3105a632) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083347Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11841476n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2081325024-1283412356-3056007607-19769187406/1/2021 12:15:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7C0E7FE0-5184-4C7F-B7F9-26B6D462D575--45641C05-1093-463C-991D-0E33FEF82009 (Friendly Name: ).2330400-92233720368547758083346Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11841476n-h2-773644-4.cbci-773644-4.local6/1/2021 12:15:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7C0E7FE0-5184-4C7F-B7F9-26B6D462D575--196BE3DC-CDCA-4695-82CF-8D96AAB18813 (Friendly Name: 7a01a932-9da6-4228-b6da-0106ac6dafd9) successfully connected to port C42572BA-CBF3-4482-9262-6237F0E213FE (Friendly Name: 7a01a932-9da6-4228-b6da-0106ac6dafd9) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083345Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11841476n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2081325024-1283412356-3056007607-19769187406/1/2021 12:15:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7C0E7FE0-5184-4C7F-B7F9-26B6D462D575--196BE3DC-CDCA-4695-82CF-8D96AAB18813 (Friendly Name: ).2330400-92233720368547758083344Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11841476n-h2-773644-4.cbci-773644-4.local6/1/2021 12:15:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df).2330400-92233720368547758083343Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39403792n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:15:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 successfully disconnected from port .2340400-92233720368547758083342Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39403792n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:15:14 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 54FE9042-C13E-42A9-8EB8-CCAD4ABE64E0--F82DDAC0-61BD-4833-8E30-514BAADFE4EA (Friendly Name: dc068e20-1c48-46ba-9ce9-f4c141c19c61).2330400-92233720368547758083341Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56605740n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1425969218-1118421310-2915874958-37646986986/1/2021 12:15:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 54FE9042-C13E-42A9-8EB8-CCAD4ABE64E0--F82DDAC0-61BD-4833-8E30-514BAADFE4EA successfully disconnected from port .2340400-92233720368547758083340Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56605740n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1425969218-1118421310-2915874958-37646986986/1/2021 12:15:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403339Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 12:15:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df) successfully connected to port 05595EB0-B05A-48D5-847D-46719E1295E6 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083338Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39405144n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:14:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: ).2330400-92233720368547758083337Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39405144n-h2-773644-4.cbci-773644-4.local6/1/2021 12:14:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df).2330400-92233720368547758083336Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38323480n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:14:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 successfully disconnected from port .2340400-92233720368547758083335Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38323480n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:14:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 60127D22-918A-46A7-8E03-8F3AA8624823--A6FA76ED-BFEE-4739-B996-70513BE0A998 (Friendly Name: 01cbb566-f474-4162-b22d-f2af46b09d2c).2330400-92233720368547758083334Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61244592n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1611824418-1185386890-982451086-5919464086/1/2021 12:14:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 60127D22-918A-46A7-8E03-8F3AA8624823--A6FA76ED-BFEE-4739-B996-70513BE0A998 successfully disconnected from port .2340400-92233720368547758083333Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61244592n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1611824418-1185386890-982451086-5919464086/1/2021 12:14:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df) successfully connected to port 05595EB0-B05A-48D5-847D-46719E1295E6 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083332Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38323368n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:14:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: ).2330400-92233720368547758083331Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38323368n-h2-773644-4.cbci-773644-4.local6/1/2021 12:14:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df).2330400-92233720368547758083330Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43164144n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:14:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 successfully disconnected from port .2340400-92233720368547758083329Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43164144n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:14:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 62D9E6CB-8A7A-4815-BA24-91D81EF75325--054CB2D9-F1BF-49F0-A818-0EF098074248 (Friendly Name: ae1508b4-6af7-4df9-8692-1f9c21dcfbfc) successfully connected to port 819A10DC-7B9B-4064-AE37-981D3A7E2B5A (Friendly Name: ae1508b4-6af7-4df9-8692-1f9c21dcfbfc) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083328Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50044780n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1658447563-1209371258-3633390778-6262597426/1/2021 12:14:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 62D9E6CB-8A7A-4815-BA24-91D81EF75325--054CB2D9-F1BF-49F0-A818-0EF098074248 (Friendly Name: ).2330400-92233720368547758083327Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50044780n-h2-773644-4.cbci-773644-4.local6/1/2021 12:14:12 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 60127D22-918A-46A7-8E03-8F3AA8624823--A6FA76ED-BFEE-4739-B996-70513BE0A998 (Friendly Name: 01cbb566-f474-4162-b22d-f2af46b09d2c) successfully connected to port AC6FCE12-1651-45FE-8FDE-6041065CE928 (Friendly Name: 01cbb566-f474-4162-b22d-f2af46b09d2c) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083326Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61245944n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1611824418-1185386890-982451086-5919464086/1/2021 12:14:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 60127D22-918A-46A7-8E03-8F3AA8624823--A6FA76ED-BFEE-4739-B996-70513BE0A998 (Friendly Name: ).2330400-92233720368547758083325Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem61245944n-h2-773644-4.cbci-773644-4.local6/1/2021 12:14:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BDAF12F7-4F2B-4103-A097-4821D4649223--156F43D3-9404-4793-89E7-A1486EE4E194 (Friendly Name: 84c348f1-0a65-472c-be0c-2305359716d0).2330400-92233720368547758083324Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49001240n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3182367479-1090735915-558405536-5967966286/1/2021 12:14:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BDAF12F7-4F2B-4103-A097-4821D4649223--156F43D3-9404-4793-89E7-A1486EE4E194 successfully disconnected from port .2340400-92233720368547758083323Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49001240n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3182367479-1090735915-558405536-5967966286/1/2021 12:14:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403322Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 12:13:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403321Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 12:13:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BDAF12F7-4F2B-4103-A097-4821D4649223--156F43D3-9404-4793-89E7-A1486EE4E194 (Friendly Name: 84c348f1-0a65-472c-be0c-2305359716d0) successfully connected to port 04BCB0E6-5CB3-4F53-922B-B72EF1C1CD13 (Friendly Name: 84c348f1-0a65-472c-be0c-2305359716d0) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083320Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49006104n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3182367479-1090735915-558405536-5967966286/1/2021 12:13:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BDAF12F7-4F2B-4103-A097-4821D4649223--156F43D3-9404-4793-89E7-A1486EE4E194 (Friendly Name: ).2330400-92233720368547758083319Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49006104n-h2-773644-4.cbci-773644-4.local6/1/2021 12:13:57 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A5B9AF13-536D-49E8-B3E6-CE1A5C408DF0--EDF56E82-F87F-44AA-843A-A7483590CF3A (Friendly Name: 199250b4-2383-43c7-b2ba-f7001d7ccea4).2330400-92233720368547758083318Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47124000n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2780409619-1239962477-449767091-40357888926/1/2021 12:13:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A5B9AF13-536D-49E8-B3E6-CE1A5C408DF0--EDF56E82-F87F-44AA-843A-A7483590CF3A successfully disconnected from port .2340400-92233720368547758083317Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47124000n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2780409619-1239962477-449767091-40357888926/1/2021 12:13:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df) successfully connected to port 05595EB0-B05A-48D5-847D-46719E1295E6 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083316Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43164752n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:13:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: ).2330400-92233720368547758083315Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43164752n-h2-773644-4.cbci-773644-4.local6/1/2021 12:13:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df).2330400-92233720368547758083314Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59845992n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:13:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 successfully disconnected from port .2340400-92233720368547758083313Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59845992n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:13:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df) successfully connected to port 05595EB0-B05A-48D5-847D-46719E1295E6 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083312Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59845992n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:13:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: ).2330400-92233720368547758083311Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem59845992n-h2-773644-4.cbci-773644-4.local6/1/2021 12:13:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df).2330400-92233720368547758083310Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52885268n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:13:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 successfully disconnected from port .2340400-92233720368547758083309Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52885268n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:13:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 10E8B9BE-1D17-49DC-A2F3-FDB8A4AE6C4D--7C1B7AB6-9E94-4898-B2E3-21FAC4961668 (Friendly Name: 8d45cfc7-29dc-4216-89b6-df20ade639f0).2330400-92233720368547758083308Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54885536n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-283687358-1239162135-3103650722-12989682286/1/2021 12:13:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 10E8B9BE-1D17-49DC-A2F3-FDB8A4AE6C4D--7C1B7AB6-9E94-4898-B2E3-21FAC4961668 successfully disconnected from port .2340400-92233720368547758083307Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54885536n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-283687358-1239162135-3103650722-12989682286/1/2021 12:13:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 10E8B9BE-1D17-49DC-A2F3-FDB8A4AE6C4D--7C1B7AB6-9E94-4898-B2E3-21FAC4961668 (Friendly Name: 8d45cfc7-29dc-4216-89b6-df20ade639f0) successfully connected to port FD12EC05-BA8C-4159-9F67-128E026EB323 (Friendly Name: 8d45cfc7-29dc-4216-89b6-df20ade639f0) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083306Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54885536n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-283687358-1239162135-3103650722-12989682286/1/2021 12:13:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 10E8B9BE-1D17-49DC-A2F3-FDB8A4AE6C4D--7C1B7AB6-9E94-4898-B2E3-21FAC4961668 (Friendly Name: ).2330400-92233720368547758083305Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54885536n-h2-773644-4.cbci-773644-4.local6/1/2021 12:13:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 54FE9042-C13E-42A9-8EB8-CCAD4ABE64E0--F82DDAC0-61BD-4833-8E30-514BAADFE4EA (Friendly Name: dc068e20-1c48-46ba-9ce9-f4c141c19c61) successfully connected to port 20CC6150-7DD8-44BB-A326-F603DAC0BAC7 (Friendly Name: dc068e20-1c48-46ba-9ce9-f4c141c19c61) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083304Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56605704n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1425969218-1118421310-2915874958-37646986986/1/2021 12:13:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 54FE9042-C13E-42A9-8EB8-CCAD4ABE64E0--F82DDAC0-61BD-4833-8E30-514BAADFE4EA (Friendly Name: ).2330400-92233720368547758083303Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem56605704n-h2-773644-4.cbci-773644-4.local6/1/2021 12:13:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 54FE9042-C13E-42A9-8EB8-CCAD4ABE64E0--F82DDAC0-61BD-4833-8E30-514BAADFE4EA (Friendly Name: dc068e20-1c48-46ba-9ce9-f4c141c19c61).2330400-92233720368547758083302Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2788892n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1425969218-1118421310-2915874958-37646986986/1/2021 12:13:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 54FE9042-C13E-42A9-8EB8-CCAD4ABE64E0--F82DDAC0-61BD-4833-8E30-514BAADFE4EA successfully disconnected from port .2340400-92233720368547758083301Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2788892n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1425969218-1118421310-2915874958-37646986986/1/2021 12:13:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6564BE0B-6E77-4538-84FA-A5CD87CDFAD4--1EA4D522-C961-4BEF-8B7B-D3CD7B2C0234 (Friendly Name: a899e185-0b73-421e-a134-d5738c33b93a).2330400-92233720368547758083300Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44121140n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1701101067-1161326199-3450206852-35732064076/1/2021 12:12:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6564BE0B-6E77-4538-84FA-A5CD87CDFAD4--1EA4D522-C961-4BEF-8B7B-D3CD7B2C0234 successfully disconnected from port .2340400-92233720368547758083299Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44121140n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1701101067-1161326199-3450206852-35732064076/1/2021 12:12:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6564BE0B-6E77-4538-84FA-A5CD87CDFAD4--1EA4D522-C961-4BEF-8B7B-D3CD7B2C0234 (Friendly Name: a899e185-0b73-421e-a134-d5738c33b93a) successfully connected to port E8D7A111-AF5B-4F1D-9FBA-95E11C675BEC (Friendly Name: a899e185-0b73-421e-a134-d5738c33b93a) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083298Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44125444n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1701101067-1161326199-3450206852-35732064076/1/2021 12:12:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6564BE0B-6E77-4538-84FA-A5CD87CDFAD4--1EA4D522-C961-4BEF-8B7B-D3CD7B2C0234 (Friendly Name: ).2330400-92233720368547758083297Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44125444n-h2-773644-4.cbci-773644-4.local6/1/2021 12:12:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 54FE9042-C13E-42A9-8EB8-CCAD4ABE64E0--F82DDAC0-61BD-4833-8E30-514BAADFE4EA (Friendly Name: dc068e20-1c48-46ba-9ce9-f4c141c19c61) successfully connected to port 20CC6150-7DD8-44BB-A326-F603DAC0BAC7 (Friendly Name: dc068e20-1c48-46ba-9ce9-f4c141c19c61) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083296Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2788892n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1425969218-1118421310-2915874958-37646986986/1/2021 12:12:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 54FE9042-C13E-42A9-8EB8-CCAD4ABE64E0--F82DDAC0-61BD-4833-8E30-514BAADFE4EA (Friendly Name: ).2330400-92233720368547758083295Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2788892n-h2-773644-4.cbci-773644-4.local6/1/2021 12:12:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403294Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 12:12:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df) successfully connected to port 05595EB0-B05A-48D5-847D-46719E1295E6 (Friendly Name: 718197f9-0296-4b64-a1c9-5fa3d37878df) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083293Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52885268n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-145515412-1337404173-3371526541-38444113826/1/2021 12:12:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 08AC6394-2B0D-4FB7-8D69-F5C8F60F25E5--A232B0C3-D0C0-475C-AD09-9AB6AD635272 (Friendly Name: ).2330400-92233720368547758083292Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52885268n-h2-773644-4.cbci-773644-4.local6/1/2021 12:12:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403291Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 12:12:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A5B9AF13-536D-49E8-B3E6-CE1A5C408DF0--EDF56E82-F87F-44AA-843A-A7483590CF3A (Friendly Name: 199250b4-2383-43c7-b2ba-f7001d7ccea4) successfully connected to port 29661607-4FFC-49A2-909C-02B609D10FDC (Friendly Name: 199250b4-2383-43c7-b2ba-f7001d7ccea4) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083290Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47124000n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2780409619-1239962477-449767091-40357888926/1/2021 12:12:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A5B9AF13-536D-49E8-B3E6-CE1A5C408DF0--EDF56E82-F87F-44AA-843A-A7483590CF3A (Friendly Name: ).2330400-92233720368547758083289Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47124000n-h2-773644-4.cbci-773644-4.local6/1/2021 12:12:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 69EC9083-BE4E-4AED-AB6A-49BFEAC36C51--CCE79F0D-52EE-4F81-9A1B-1ECA5E96A441 (Friendly Name: 8319be32-0c53-4a84-b40a-46669354252a).2330400-92233720368547758083288Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38125196n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1777111171-1257094734-3209259691-13660825386/1/2021 12:12:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 69EC9083-BE4E-4AED-AB6A-49BFEAC36C51--CCE79F0D-52EE-4F81-9A1B-1ECA5E96A441 successfully disconnected from port .2340400-92233720368547758083287Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38125196n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1777111171-1257094734-3209259691-13660825386/1/2021 12:12:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic BD91D0D6-5945-4B35-A80C-9A410CA3B642--4E36318A-0D82-4A83-931F-9F9BD8E956DD (Friendly Name: 9b400867-0bce-4a60-8e03-fb40a8fc8765).2330400-92233720368547758083286Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30521036n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3180450006-1261787461-1100614824-11192655486/1/2021 12:11:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BD91D0D6-5945-4B35-A80C-9A410CA3B642--4E36318A-0D82-4A83-931F-9F9BD8E956DD successfully disconnected from port .2340400-92233720368547758083285Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30521036n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3180450006-1261787461-1100614824-11192655486/1/2021 12:11:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-F2-F8-7B has moved from port C5AE2C2D-5DD3-449B-992D-D6F070346B20 (Friendly Name: 8319be32-0c53-4a84-b40a-46669354252a) to port C5AE2C2D-5DD3-449B-992D-D6F070346B20 (Friendly Name: 8319be32-0c53-4a84-b40a-46669354252a).250410180-92233720368547758083284Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284636n-h2-773644-4.cbci-773644-4.local6/1/2021 12:11:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 69EC9083-BE4E-4AED-AB6A-49BFEAC36C51--CCE79F0D-52EE-4F81-9A1B-1ECA5E96A441 (Friendly Name: 8319be32-0c53-4a84-b40a-46669354252a) successfully connected to port C5AE2C2D-5DD3-449B-992D-D6F070346B20 (Friendly Name: 8319be32-0c53-4a84-b40a-46669354252a) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083283Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38124604n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1777111171-1257094734-3209259691-13660825386/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--4745C8A6-A8BB-4EC9-B613-8389F40F7390 (Friendly Name: 6d79d3c8-fbd2-474e-bc3d-dfc4ce7cfeda) successfully connected to port 09867B72-B7FD-4AEA-9D9A-2B6475E527DA (Friendly Name: 6d79d3c8-fbd2-474e-bc3d-dfc4ce7cfeda) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083282Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--4745C8A6-A8BB-4EC9-B613-8389F40F7390 (Friendly Name: ).2330400-92233720368547758083281Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.local6/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--1BADD202-79FC-4790-BCB5-4727CCADB80B (Friendly Name: 2eb63327-02d6-4b63-8ff0-f74d237f0cbd) successfully connected to port 07A3231E-CA27-411D-9C47-413F0F19548C (Friendly Name: 2eb63327-02d6-4b63-8ff0-f74d237f0cbd) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083280Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--1BADD202-79FC-4790-BCB5-4727CCADB80B (Friendly Name: ).2330400-92233720368547758083279Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.local6/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--0C693B9E-4F04-49FA-BD27-41F2B458B81E (Friendly Name: 722024bf-6568-48d4-8c34-7a25ec14df4f) successfully connected to port 3CA9D033-A6F8-4178-8CC5-43EC8812E101 (Friendly Name: 722024bf-6568-48d4-8c34-7a25ec14df4f) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083278Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--0C693B9E-4F04-49FA-BD27-41F2B458B81E (Friendly Name: ).2330400-92233720368547758083277Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.local6/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--0280EC3A-332E-45F2-97BE-839688DB30AC (Friendly Name: 608ce9c1-191b-4f3f-9cac-befa0913ec50) successfully connected to port 95C3EB6B-3E32-4533-BD76-3059AE04FF00 (Friendly Name: 608ce9c1-191b-4f3f-9cac-befa0913ec50) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083276Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--0280EC3A-332E-45F2-97BE-839688DB30AC (Friendly Name: ).2330400-92233720368547758083275Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.local6/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--9993EA0D-23F7-4611-A3B3-07A23471E017 (Friendly Name: 00810f20-c4ee-417a-93d5-a0af7f03e030) successfully connected to port DABF056F-19F7-4E47-9059-1AA5953F53E3 (Friendly Name: 00810f20-c4ee-417a-93d5-a0af7f03e030) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083274Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--9993EA0D-23F7-4611-A3B3-07A23471E017 (Friendly Name: ).2330400-92233720368547758083273Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.local6/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--F8A4D225-D863-47BC-99CF-2FE1DB4EC723 (Friendly Name: 2152272f-2588-4520-81ee-f113f05d7922) successfully connected to port 2E39DF24-406E-4AEA-837C-48BAEB964A98 (Friendly Name: 2152272f-2588-4520-81ee-f113f05d7922) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083272Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--F8A4D225-D863-47BC-99CF-2FE1DB4EC723 (Friendly Name: ).2330400-92233720368547758083271Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.local6/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BB06C494-7686-4FD2-93D8-9080FA6DE7C6--0D0D870C-8C43-4CC5-A6DB-81ABC8CC41AD (Friendly Name: 943c7b96-dbc9-48c9-8ec6-af82fe135c5d) successfully connected to port 3495716E-BACC-43F6-AF3D-0B3E1B0B2B03 (Friendly Name: 943c7b96-dbc9-48c9-8ec6-af82fe135c5d) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083270Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3137782932-1339192966-2156976275-33370557386/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BB06C494-7686-4FD2-93D8-9080FA6DE7C6--0D0D870C-8C43-4CC5-A6DB-81ABC8CC41AD (Friendly Name: ).2330400-92233720368547758083269Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41724020n-h2-773644-4.cbci-773644-4.local6/1/2021 12:11:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 69EC9083-BE4E-4AED-AB6A-49BFEAC36C51--CCE79F0D-52EE-4F81-9A1B-1ECA5E96A441 (Friendly Name: ).2330400-92233720368547758083268Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38124604n-h2-773644-4.cbci-773644-4.local6/1/2021 12:11:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D3A02FE8-C024-4FFD-B99D-D5A28BA8AC00--D8DB5D6E-CA41-4A76-A821-1AC65C4DC6B4 (Friendly Name: 8319be32-0c53-4a84-b40a-46669354252a).2330400-92233720368547758083267Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48162436n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3550490600-1342029860-2731908537-113153396/1/2021 12:11:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D3A02FE8-C024-4FFD-B99D-D5A28BA8AC00--D8DB5D6E-CA41-4A76-A821-1AC65C4DC6B4 successfully disconnected from port .2340400-92233720368547758083266Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48162436n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3550490600-1342029860-2731908537-113153396/1/2021 12:11:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B46FA044-5997-4537-981A-BD463BCD7CF1--AD94D673-2E42-4C29-B6F0-90890B2FF981 (Friendly Name: a41b91e7-00f6-4aba-b51e-9653e994aaa6).2330400-92233720368547758083265Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6764088n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3027214404-1161255319-1186798232-40514880596/1/2021 12:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B46FA044-5997-4537-981A-BD463BCD7CF1--AD94D673-2E42-4C29-B6F0-90890B2FF981 successfully disconnected from port .2340400-92233720368547758083264Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6764088n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3027214404-1161255319-1186798232-40514880596/1/2021 12:11:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E89092BC-608E-4430-AD9A-3BFCCC4D3A98--477446FA-94EF-4A42-BDF2-9F2C6525A333 (Friendly Name: 4f12cbc6-2444-49d1-81ca-2bda599c143d).2330400-92233720368547758083263Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27045140n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3901788860-1144021134-4231764653-25539578366/1/2021 12:10:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E89092BC-608E-4430-AD9A-3BFCCC4D3A98--477446FA-94EF-4A42-BDF2-9F2C6525A333 successfully disconnected from port .2340400-92233720368547758083262Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27045140n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3901788860-1144021134-4231764653-25539578366/1/2021 12:10:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B46FA044-5997-4537-981A-BD463BCD7CF1--AD94D673-2E42-4C29-B6F0-90890B2FF981 (Friendly Name: a41b91e7-00f6-4aba-b51e-9653e994aaa6) successfully connected to port 6A520A9B-D027-4A98-8E6E-6492161CA3F6 (Friendly Name: a41b91e7-00f6-4aba-b51e-9653e994aaa6) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083261Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6762668n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3027214404-1161255319-1186798232-40514880596/1/2021 12:10:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B46FA044-5997-4537-981A-BD463BCD7CF1--AD94D673-2E42-4C29-B6F0-90890B2FF981 (Friendly Name: ).2330400-92233720368547758083260Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6762668n-h2-773644-4.cbci-773644-4.local6/1/2021 12:10:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E89092BC-608E-4430-AD9A-3BFCCC4D3A98--477446FA-94EF-4A42-BDF2-9F2C6525A333 (Friendly Name: 4f12cbc6-2444-49d1-81ca-2bda599c143d) successfully connected to port A6ADE7C0-1820-4345-9C67-1CC2DCDB0D36 (Friendly Name: 4f12cbc6-2444-49d1-81ca-2bda599c143d) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083259Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27043364n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3901788860-1144021134-4231764653-25539578366/1/2021 12:10:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E89092BC-608E-4430-AD9A-3BFCCC4D3A98--477446FA-94EF-4A42-BDF2-9F2C6525A333 (Friendly Name: ).2330400-92233720368547758083258Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27043364n-h2-773644-4.cbci-773644-4.local6/1/2021 12:10:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403257Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 12:10:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403256Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 12:10:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403255Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 12:10:34 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D3A02FE8-C024-4FFD-B99D-D5A28BA8AC00--D8DB5D6E-CA41-4A76-A821-1AC65C4DC6B4 (Friendly Name: 8319be32-0c53-4a84-b40a-46669354252a) successfully connected to port CAA6D45B-4BB2-4334-8532-DCEC3621FC1A (Friendly Name: 8319be32-0c53-4a84-b40a-46669354252a) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083254Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48163796n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3550490600-1342029860-2731908537-113153396/1/2021 12:10:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D3A02FE8-C024-4FFD-B99D-D5A28BA8AC00--D8DB5D6E-CA41-4A76-A821-1AC65C4DC6B4 (Friendly Name: ).2330400-92233720368547758083253Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48163796n-h2-773644-4.cbci-773644-4.local6/1/2021 12:10:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic FFC345E1-4809-473B-8436-798E2EDB866E--F2759993-ECA1-4251-847B-AB8A0BF7846C (Friendly Name: 8319be32-0c53-4a84-b40a-46669354252a).2330400-92233720368547758083252Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58685932n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4290987489-1195067401-2390308484-18543316946/1/2021 12:10:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FFC345E1-4809-473B-8436-798E2EDB866E--F2759993-ECA1-4251-847B-AB8A0BF7846C successfully disconnected from port .2340400-92233720368547758083251Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58685932n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4290987489-1195067401-2390308484-18543316946/1/2021 12:10:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6D62F956-845D-4B7F-8EF0-062FE710574C--D563D249-F29E-46BA-971F-EC317D3CD378 (Friendly Name: e5d00bb8-c407-4d43-bc45-84d626a7ff77).2330400-92233720368547758083250Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60126076n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1835202902-1266648157-788983950-12807743756/1/2021 12:09:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6D62F956-845D-4B7F-8EF0-062FE710574C--D563D249-F29E-46BA-971F-EC317D3CD378 successfully disconnected from port .2340400-92233720368547758083249Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60126076n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1835202902-1266648157-788983950-12807743756/1/2021 12:09:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403248Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 12:09:24 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC BD91D0D6-5945-4B35-A80C-9A410CA3B642--4E36318A-0D82-4A83-931F-9F9BD8E956DD (Friendly Name: 9b400867-0bce-4a60-8e03-fb40a8fc8765) successfully connected to port 19709CC8-6A16-42EA-8C5B-0CB99D57DF0A (Friendly Name: 9b400867-0bce-4a60-8e03-fb40a8fc8765) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083247Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30524916n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3180450006-1261787461-1100614824-11192655486/1/2021 12:09:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic BD91D0D6-5945-4B35-A80C-9A410CA3B642--4E36318A-0D82-4A83-931F-9F9BD8E956DD (Friendly Name: ).2330400-92233720368547758083246Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30524916n-h2-773644-4.cbci-773644-4.local6/1/2021 12:09:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403245Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 12:09:09 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic DF34301A-C28E-4A30-95A7-A4D55CB1DA1B--F6402013-167F-4FD6-BEEA-4CF2EF27F5CB (Friendly Name: 61950116-d2a8-4e4c-aa41-b5f55842acb0).2330400-92233720368547758083244Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21484316n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3744739354-1244709518-3584337813-4673170846/1/2021 12:09:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DF34301A-C28E-4A30-95A7-A4D55CB1DA1B--F6402013-167F-4FD6-BEEA-4CF2EF27F5CB successfully disconnected from port .2340400-92233720368547758083243Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21484316n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3744739354-1244709518-3584337813-4673170846/1/2021 12:09:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6D62F956-845D-4B7F-8EF0-062FE710574C--D563D249-F29E-46BA-971F-EC317D3CD378 (Friendly Name: e5d00bb8-c407-4d43-bc45-84d626a7ff77) successfully connected to port 53AE79A7-1B39-42F0-92CE-AFF02484DCEB (Friendly Name: e5d00bb8-c407-4d43-bc45-84d626a7ff77) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083242Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60126032n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1835202902-1266648157-788983950-12807743756/1/2021 12:08:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6D62F956-845D-4B7F-8EF0-062FE710574C--D563D249-F29E-46BA-971F-EC317D3CD378 (Friendly Name: ).2330400-92233720368547758083241Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem60126032n-h2-773644-4.cbci-773644-4.local6/1/2021 12:08:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 871EA4E9-DA75-4A42-BB0B-EF183A6EFCA0--6D0C930B-9FD3-4E46-A126-31654D82F1B5 (Friendly Name: fbf4551a-f406-4865-a819-1038c73cc742).2330400-92233720368547758083240Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57165736n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2266932457-1245895285-418319291-27008978506/1/2021 12:08:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 871EA4E9-DA75-4A42-BB0B-EF183A6EFCA0--6D0C930B-9FD3-4E46-A126-31654D82F1B5 successfully disconnected from port .2340400-92233720368547758083239Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57165736n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2266932457-1245895285-418319291-27008978506/1/2021 12:08:50 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FFC345E1-4809-473B-8436-798E2EDB866E--F2759993-ECA1-4251-847B-AB8A0BF7846C (Friendly Name: 8319be32-0c53-4a84-b40a-46669354252a) successfully connected to port 1E37C583-DAD4-412B-9FDD-AC0971D2C1BE (Friendly Name: 8319be32-0c53-4a84-b40a-46669354252a) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083238Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58685888n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4290987489-1195067401-2390308484-18543316946/1/2021 12:08:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic FFC345E1-4809-473B-8436-798E2EDB866E--F2759993-ECA1-4251-847B-AB8A0BF7846C (Friendly Name: ).2330400-92233720368547758083237Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem58685888n-h2-773644-4.cbci-773644-4.local6/1/2021 12:08:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 50FC272B-63CD-4652-BC39-2338058A6ACA--08565064-A021-4D9D-BC65-76670D860493 (Friendly Name: 0983583a-5c80-48b2-bb9b-8acf066a68db).2330400-92233720368547758083236Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54725536n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1358702379-1179804621-941832636-33959797816/1/2021 12:08:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 50FC272B-63CD-4652-BC39-2338058A6ACA--08565064-A021-4D9D-BC65-76670D860493 successfully disconnected from port .2340400-92233720368547758083235Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54725536n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1358702379-1179804621-941832636-33959797816/1/2021 12:08:45 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-1E-08-F1 has moved from port 4317E814-2C5B-44A0-8FB5-EF9905586111 (Friendly Name: fbf4551a-f406-4865-a819-1038c73cc742) to port 4317E814-2C5B-44A0-8FB5-EF9905586111 (Friendly Name: fbf4551a-f406-4865-a819-1038c73cc742).250410180-92233720368547758083234Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284664n-h2-773644-4.cbci-773644-4.local6/1/2021 12:08:44 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 871EA4E9-DA75-4A42-BB0B-EF183A6EFCA0--6D0C930B-9FD3-4E46-A126-31654D82F1B5 (Friendly Name: fbf4551a-f406-4865-a819-1038c73cc742) successfully connected to port 4317E814-2C5B-44A0-8FB5-EF9905586111 (Friendly Name: fbf4551a-f406-4865-a819-1038c73cc742) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083233Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57165740n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2266932457-1245895285-418319291-27008978506/1/2021 12:08:43 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 871EA4E9-DA75-4A42-BB0B-EF183A6EFCA0--6D0C930B-9FD3-4E46-A126-31654D82F1B5 (Friendly Name: ).2330400-92233720368547758083232Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem57165736n-h2-773644-4.cbci-773644-4.local6/1/2021 12:08:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 50FC272B-63CD-4652-BC39-2338058A6ACA--08565064-A021-4D9D-BC65-76670D860493 (Friendly Name: 0983583a-5c80-48b2-bb9b-8acf066a68db) successfully connected to port 5C834E18-06A6-4275-BDE2-B9DBF0499C7A (Friendly Name: 0983583a-5c80-48b2-bb9b-8acf066a68db) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083231Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54725492n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1358702379-1179804621-941832636-33959797816/1/2021 12:08:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 50FC272B-63CD-4652-BC39-2338058A6ACA--08565064-A021-4D9D-BC65-76670D860493 (Friendly Name: ).2330400-92233720368547758083230Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem54725492n-h2-773644-4.cbci-773644-4.local6/1/2021 12:08:26 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 433D2A49-A51F-4E41-A15E-955E21C2BEE2--9DF7172C-9456-4001-89AB-9334C1DB418C (Friendly Name: d526eb66-02ef-4b0f-a208-b5db6880b274).2330400-92233720368547758083229Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49641140n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1128081993-1312924959-1586847393-38041523536/1/2021 12:08:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 433D2A49-A51F-4E41-A15E-955E21C2BEE2--9DF7172C-9456-4001-89AB-9334C1DB418C successfully disconnected from port .2340400-92233720368547758083228Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49641140n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1128081993-1312924959-1586847393-38041523536/1/2021 12:08:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EE54BF4E-F6C9-482A-B84D-4AEB60B1BEDF--C71E8708-4541-4436-B311-C420DE2360CD (Friendly Name: 12e8da7d-8f6d-469f-8623-3cb4748e451d).2330400-92233720368547758083227Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20803948n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3998531406-1210775241-3947515320-37538164166/1/2021 12:08:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EE54BF4E-F6C9-482A-B84D-4AEB60B1BEDF--C71E8708-4541-4436-B311-C420DE2360CD successfully disconnected from port .2340400-92233720368547758083226Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20803948n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3998531406-1210775241-3947515320-37538164166/1/2021 12:08:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7C2B2450-21BF-4BA1-9CB1-E0EDF4E9B6ED--71F703D4-730D-48DA-BAED-30B9EDF53149 (Friendly Name: fbf4551a-f406-4865-a819-1038c73cc742).2330400-92233720368547758083225Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52085284n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2083202128-1268851135-3990925724-39881876366/1/2021 12:08:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7C2B2450-21BF-4BA1-9CB1-E0EDF4E9B6ED--71F703D4-730D-48DA-BAED-30B9EDF53149 successfully disconnected from port .2340400-92233720368547758083224Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52085284n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2083202128-1268851135-3990925724-39881876366/1/2021 12:08:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1AEE3F11-7E5D-4ACA-B46B-CBF3231C94EB--6A488C3A-EAEB-4CB6-9977-B47DCFB47A8D (Friendly Name: 1cc8ffe0-d56c-44f4-bfb9-e67027b06471).2330400-92233720368547758083223Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49444932n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-451821329-1254784605-4090194868-39523522916/1/2021 12:08:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1AEE3F11-7E5D-4ACA-B46B-CBF3231C94EB--6A488C3A-EAEB-4CB6-9977-B47DCFB47A8D successfully disconnected from port .2340400-92233720368547758083222Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49444932n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-451821329-1254784605-4090194868-39523522916/1/2021 12:08:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 639CC37A-368E-4233-A041-593154AF7EFD--9D135C13-8F4A-4B8B-A8D7-2941C7B5BEBB (Friendly Name: 7b23b981-7c93-479c-8b2f-c0055a79632a).2330400-92233720368547758083221Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10484400n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1671218042-1110652558-827933088-42529380686/1/2021 12:08:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 639CC37A-368E-4233-A041-593154AF7EFD--9D135C13-8F4A-4B8B-A8D7-2941C7B5BEBB successfully disconnected from port .2340400-92233720368547758083220Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10484400n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1671218042-1110652558-827933088-42529380686/1/2021 12:08:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Registry service entered the stopped state.7036016384400-91873432398358118403219Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 12:07:58 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D60DB2D4-3D68-4B42-94C4-C5CF92E7E118--9AFFFE4F-674F-406C-AE20-15BDA31A849D (Friendly Name: a1e57ffa-5d85-4e92-a05f-b97706f311b6).2330400-92233720368547758083218Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34843464n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3591221972-1262632296-3485844628-4174580666/1/2021 12:07:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60DB2D4-3D68-4B42-94C4-C5CF92E7E118--9AFFFE4F-674F-406C-AE20-15BDA31A849D successfully disconnected from port .2340400-92233720368547758083217Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34843464n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3591221972-1262632296-3485844628-4174580666/1/2021 12:07:55 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403216Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 12:07:52 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 893EB4AC-9EFE-4C50-AFD1-CB16F7753E4A--B6BB3537-14D8-4BF3-8AE5-366F4378F9C8 (Friendly Name: 0d5ad632-fc9c-40ed-8ea4-e2344b778194).2330400-92233720368547758083215Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51083824n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2302588076-1280351998-382456239-12456074156/1/2021 12:07:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 893EB4AC-9EFE-4C50-AFD1-CB16F7753E4A--B6BB3537-14D8-4BF3-8AE5-366F4378F9C8 successfully disconnected from port .2340400-92233720368547758083214Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51083824n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2302588076-1280351998-382456239-12456074156/1/2021 12:07:47 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A5F08B07-0A60-4999-BF82-F7B40EB197B9--55370720-D43A-47D3-A420-DF42EA338D3B (Friendly Name: d50c8086-de3a-4c88-b5ce-d920f3553cf7).2330400-92233720368547758083213Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47324220n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2784004871-1234766432-3036119743-31137262226/1/2021 12:07:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A5F08B07-0A60-4999-BF82-F7B40EB197B9--55370720-D43A-47D3-A420-DF42EA338D3B successfully disconnected from port .2340400-92233720368547758083212Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47324220n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2784004871-1234766432-3036119743-31137262226/1/2021 12:07:38 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7C2B2450-21BF-4BA1-9CB1-E0EDF4E9B6ED--71F703D4-730D-48DA-BAED-30B9EDF53149 (Friendly Name: fbf4551a-f406-4865-a819-1038c73cc742) successfully connected to port 9FC24DDB-2EC6-40DC-B641-81B10AD342DA (Friendly Name: fbf4551a-f406-4865-a819-1038c73cc742) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083211Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52085232n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2083202128-1268851135-3990925724-39881876366/1/2021 12:07:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7C2B2450-21BF-4BA1-9CB1-E0EDF4E9B6ED--71F703D4-730D-48DA-BAED-30B9EDF53149 (Friendly Name: ).2330400-92233720368547758083210Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem52085232n-h2-773644-4.cbci-773644-4.local6/1/2021 12:07:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 508E6ECE-6C27-4F8D-AC54-E3C6B295CDB7--3CD43FE3-55E6-4B9F-82B1-289751684FC1 (Friendly Name: 671fc6ba-02da-4eab-b674-44f37080b9de).2330400-92233720368547758083209Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41762812n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1351511758-1334668327-3336787116-30837037306/1/2021 12:07:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 508E6ECE-6C27-4F8D-AC54-E3C6B295CDB7--3CD43FE3-55E6-4B9F-82B1-289751684FC1 successfully disconnected from port .2340400-92233720368547758083208Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41762812n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1351511758-1334668327-3336787116-30837037306/1/2021 12:07:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1CAEEE36-EC16-4FD0-B12B-98A6D8C7B18A--81589517-8B07-4D3D-9EB6-EF51A7A08FF0 (Friendly Name: 87f9ac78-e771-4fd8-bef8-57c0ef6539a8).2330400-92233720368547758083207Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29124124n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-481226294-1339091990-2794990513-23269068406/1/2021 12:07:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1CAEEE36-EC16-4FD0-B12B-98A6D8C7B18A--81589517-8B07-4D3D-9EB6-EF51A7A08FF0 successfully disconnected from port .2340400-92233720368547758083206Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29124124n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-481226294-1339091990-2794990513-23269068406/1/2021 12:07:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B18F2CF3-9B9C-4A6D-848D-B7E695037366--2F42FC5E-EF07-455B-8654-5F7A3A009440 (Friendly Name: 00ccd3ac-70f4-4f1c-99a6-ffed8d80a5e8).2330400-92233720368547758083205Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48363876n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2978950387-1248697244-3870788996-17188135896/1/2021 12:07:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B18F2CF3-9B9C-4A6D-848D-B7E695037366--2F42FC5E-EF07-455B-8654-5F7A3A009440 successfully disconnected from port .2340400-92233720368547758083204Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48363876n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2978950387-1248697244-3870788996-17188135896/1/2021 12:07:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F734834C-6679-438E-8816-AB30E8387B7F--71C12AC9-83EB-41B1-990B-F395DCCFB43A (Friendly Name: 02f2b274-d279-4863-a19e-b485584f6b98).2330400-92233720368547758083203Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37842992n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4147413836-1133405817-816518792-21387819286/1/2021 12:07:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F734834C-6679-438E-8816-AB30E8387B7F--71C12AC9-83EB-41B1-990B-F395DCCFB43A successfully disconnected from port .2340400-92233720368547758083202Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37842992n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4147413836-1133405817-816518792-21387819286/1/2021 12:07:28 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403201Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 12:07:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403200Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 12:07:21 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1CAEEE36-EC16-4FD0-B12B-98A6D8C7B18A--81589517-8B07-4D3D-9EB6-EF51A7A08FF0 (Friendly Name: 87f9ac78-e771-4fd8-bef8-57c0ef6539a8) successfully connected to port 8F5E3C71-0989-4A8C-A8BF-FFA59C5241DE (Friendly Name: 87f9ac78-e771-4fd8-bef8-57c0ef6539a8) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083199Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29124124n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-481226294-1339091990-2794990513-23269068406/1/2021 12:07:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1CAEEE36-EC16-4FD0-B12B-98A6D8C7B18A--81589517-8B07-4D3D-9EB6-EF51A7A08FF0 (Friendly Name: ).2330400-92233720368547758083198Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29124124n-h2-773644-4.cbci-773644-4.local6/1/2021 12:07:20 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118403197Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 12:07:05 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 893EB4AC-9EFE-4C50-AFD1-CB16F7753E4A--B6BB3537-14D8-4BF3-8AE5-366F4378F9C8 (Friendly Name: 0d5ad632-fc9c-40ed-8ea4-e2344b778194) successfully connected to port 805DE014-5BFC-4085-BAC9-A08EE282A4F7 (Friendly Name: 0d5ad632-fc9c-40ed-8ea4-e2344b778194) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083196Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51084232n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2302588076-1280351998-382456239-12456074156/1/2021 12:07:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 893EB4AC-9EFE-4C50-AFD1-CB16F7753E4A--B6BB3537-14D8-4BF3-8AE5-366F4378F9C8 (Friendly Name: ).2330400-92233720368547758083195Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51084232n-h2-773644-4.cbci-773644-4.local6/1/2021 12:07:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118403194Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 12:07:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CA0145F6-936A-499B-946D-160974AB1603--D1C9C870-0DE6-44E0-B718-B75EA7BE287B (Friendly Name: c65e1636-ee96-4468-8230-4321eb9948f8).2330400-92233720368547758083193Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50603928n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3389081078-1234932586-152464788-518173326/1/2021 12:06:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CA0145F6-936A-499B-946D-160974AB1603--D1C9C870-0DE6-44E0-B718-B75EA7BE287B successfully disconnected from port .2340400-92233720368547758083192Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50603928n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3389081078-1234932586-152464788-518173326/1/2021 12:06:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E04A74AD-ACE2-4E72-AE90-2ED370EB7AA0--F445E697-7F71-4C50-A3DC-F0580F818DF5 (Friendly Name: ec786c21-eae5-4219-ba76-e162dab70e65).2330400-92233720368547758083191Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38243468n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3762975917-1316138210-3543044270-26924102246/1/2021 12:06:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E04A74AD-ACE2-4E72-AE90-2ED370EB7AA0--F445E697-7F71-4C50-A3DC-F0580F818DF5 successfully disconnected from port .2340400-92233720368547758083190Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38243468n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3762975917-1316138210-3543044270-26924102246/1/2021 12:06:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-99-48-88 has moved from port EA8E7E71-CF5F-49B7-96CB-AC2115F3F9A3 (Friendly Name: ec786c21-eae5-4219-ba76-e162dab70e65) to port EA8E7E71-CF5F-49B7-96CB-AC2115F3F9A3 (Friendly Name: ec786c21-eae5-4219-ba76-e162dab70e65).250410180-92233720368547758083189Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25283756n-h2-773644-4.cbci-773644-4.local6/1/2021 12:06:42 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E04A74AD-ACE2-4E72-AE90-2ED370EB7AA0--F445E697-7F71-4C50-A3DC-F0580F818DF5 (Friendly Name: ec786c21-eae5-4219-ba76-e162dab70e65) successfully connected to port EA8E7E71-CF5F-49B7-96CB-AC2115F3F9A3 (Friendly Name: ec786c21-eae5-4219-ba76-e162dab70e65) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083188Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38243772n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3762975917-1316138210-3543044270-26924102246/1/2021 12:06:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E04A74AD-ACE2-4E72-AE90-2ED370EB7AA0--F445E697-7F71-4C50-A3DC-F0580F818DF5 (Friendly Name: ).2330400-92233720368547758083187Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38243772n-h2-773644-4.cbci-773644-4.local6/1/2021 12:06:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60DB2D4-3D68-4B42-94C4-C5CF92E7E118--9AFFFE4F-674F-406C-AE20-15BDA31A849D (Friendly Name: a1e57ffa-5d85-4e92-a05f-b97706f311b6) successfully connected to port 362E2F33-1850-4542-9960-B4AA2FE3E1CC (Friendly Name: a1e57ffa-5d85-4e92-a05f-b97706f311b6) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083186Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34843464n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3591221972-1262632296-3485844628-4174580666/1/2021 12:06:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D60DB2D4-3D68-4B42-94C4-C5CF92E7E118--9AFFFE4F-674F-406C-AE20-15BDA31A849D (Friendly Name: ).2330400-92233720368547758083185Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34843464n-h2-773644-4.cbci-773644-4.local6/1/2021 12:06:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server. This event occurs once per boot of the server on the first time a client uses NTLM with this server. NTLM is a weaker authentication mechanism. Please check: Which applications are using NTLM authentication? Are there configuration issues preventing the use of stronger authentication such as Kerberos authentication? If NTLM must be supported, is Extended Protection configured? Details on how to complete these checks can be found at http://go.microsoft.com/fwlink/?LinkId=225699.603800300360287970189639683184LsaSrv199fe037-2b82-40a9-82ac-e1d46c792b99System00n-h2-773644-4.cbci-773644-4.local6/1/2021 12:06:25 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CA0145F6-936A-499B-946D-160974AB1603--D1C9C870-0DE6-44E0-B718-B75EA7BE287B (Friendly Name: c65e1636-ee96-4468-8230-4321eb9948f8) successfully connected to port A9C260FC-3D9A-4E10-BC72-E95F559B4757 (Friendly Name: c65e1636-ee96-4468-8230-4321eb9948f8) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083183Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50603556n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3389081078-1234932586-152464788-518173326/1/2021 12:06:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CA0145F6-936A-499B-946D-160974AB1603--D1C9C870-0DE6-44E0-B718-B75EA7BE287B (Friendly Name: ).2330400-92233720368547758083182Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50603556n-h2-773644-4.cbci-773644-4.local6/1/2021 12:06:23 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A5F08B07-0A60-4999-BF82-F7B40EB197B9--55370720-D43A-47D3-A420-DF42EA338D3B (Friendly Name: d50c8086-de3a-4c88-b5ce-d920f3553cf7) successfully connected to port E84ADCD8-630D-4A75-92C8-97FF445C81F8 (Friendly Name: d50c8086-de3a-4c88-b5ce-d920f3553cf7) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083181Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4732948n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2784004871-1234766432-3036119743-31137262226/1/2021 12:06:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A5F08B07-0A60-4999-BF82-F7B40EB197B9--55370720-D43A-47D3-A420-DF42EA338D3B (Friendly Name: ).2330400-92233720368547758083180Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4732948n-h2-773644-4.cbci-773644-4.local6/1/2021 12:06:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118403179Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 12:06:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1AEE3F11-7E5D-4ACA-B46B-CBF3231C94EB--6A488C3A-EAEB-4CB6-9977-B47DCFB47A8D (Friendly Name: 1cc8ffe0-d56c-44f4-bfb9-e67027b06471) successfully connected to port 92F9A248-4503-4D03-B548-9657085A1D77 (Friendly Name: 1cc8ffe0-d56c-44f4-bfb9-e67027b06471) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083178Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49442044n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-451821329-1254784605-4090194868-39523522916/1/2021 12:05:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1AEE3F11-7E5D-4ACA-B46B-CBF3231C94EB--6A488C3A-EAEB-4CB6-9977-B47DCFB47A8D (Friendly Name: ).2330400-92233720368547758083177Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49442044n-h2-773644-4.cbci-773644-4.local6/1/2021 12:05:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118403176Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 12:05:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AD642DDF-6EAB-46A5-BE3C-8712577CE5D2--A54A7FCD-DA17-4986-809D-C0062B9A93FB (Friendly Name: 7f950e05-754e-476d-b3b5-a6f03fd14984).2330400-92233720368547758083175Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26245088n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2909023711-1185246891-310852798-35382549356/1/2021 12:05:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD642DDF-6EAB-46A5-BE3C-8712577CE5D2--A54A7FCD-DA17-4986-809D-C0062B9A93FB successfully disconnected from port .2340400-92233720368547758083174Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26245088n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2909023711-1185246891-310852798-35382549356/1/2021 12:05:32 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EE54BF4E-F6C9-482A-B84D-4AEB60B1BEDF--C71E8708-4541-4436-B311-C420DE2360CD (Friendly Name: 12e8da7d-8f6d-469f-8623-3cb4748e451d) successfully connected to port 2CD30BE8-695C-41C7-9D0C-7D0C03FC1C1F (Friendly Name: 12e8da7d-8f6d-469f-8623-3cb4748e451d) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083173Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20802520n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3998531406-1210775241-3947515320-37538164166/1/2021 12:05:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EE54BF4E-F6C9-482A-B84D-4AEB60B1BEDF--C71E8708-4541-4436-B311-C420DE2360CD (Friendly Name: ).2330400-92233720368547758083172Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20802520n-h2-773644-4.cbci-773644-4.local6/1/2021 12:05:27 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 433D2A49-A51F-4E41-A15E-955E21C2BEE2--9DF7172C-9456-4001-89AB-9334C1DB418C (Friendly Name: d526eb66-02ef-4b0f-a208-b5db6880b274) successfully connected to port 4C0277B8-3654-4C14-BA28-F0085A4EA6A7 (Friendly Name: d526eb66-02ef-4b0f-a208-b5db6880b274) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083171Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49641340n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1128081993-1312924959-1586847393-38041523536/1/2021 12:05:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 433D2A49-A51F-4E41-A15E-955E21C2BEE2--9DF7172C-9456-4001-89AB-9334C1DB418C (Friendly Name: ).2330400-92233720368547758083170Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49641340n-h2-773644-4.cbci-773644-4.local6/1/2021 12:05:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-57-10-E1 has moved from port 1B4235D2-574C-4422-86AE-689837BCC53D (Friendly Name: 61950116-d2a8-4e4c-aa41-b5f55842acb0) to port 1B4235D2-574C-4422-86AE-689837BCC53D (Friendly Name: 61950116-d2a8-4e4c-aa41-b5f55842acb0).250410180-92233720368547758083169Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25284656n-h2-773644-4.cbci-773644-4.local6/1/2021 12:05:17 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DF34301A-C28E-4A30-95A7-A4D55CB1DA1B--F6402013-167F-4FD6-BEEA-4CF2EF27F5CB (Friendly Name: 61950116-d2a8-4e4c-aa41-b5f55842acb0) successfully connected to port 1B4235D2-574C-4422-86AE-689837BCC53D (Friendly Name: 61950116-d2a8-4e4c-aa41-b5f55842acb0) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083168Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21484316n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3744739354-1244709518-3584337813-4673170846/1/2021 12:05:15 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic DF34301A-C28E-4A30-95A7-A4D55CB1DA1B--F6402013-167F-4FD6-BEEA-4CF2EF27F5CB (Friendly Name: ).2330400-92233720368547758083167Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21484316n-h2-773644-4.cbci-773644-4.local6/1/2021 12:05:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403166Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 12:05:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403165Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 12:05:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 65EFDE8F-2BBB-4366-A1CB-D90C4DA3FCB4--C109A15B-0EEA-402D-B4DC-A26614C528CF (Friendly Name: 61950116-d2a8-4e4c-aa41-b5f55842acb0).2330400-92233720368547758083164Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29204528n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1710218895-1130769339-215600033-30364557576/1/2021 12:05:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 65EFDE8F-2BBB-4366-A1CB-D90C4DA3FCB4--C109A15B-0EEA-402D-B4DC-A26614C528CF successfully disconnected from port .2340400-92233720368547758083163Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29204528n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1710218895-1130769339-215600033-30364557576/1/2021 12:05:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-57-E4-30 has moved from port 646218F0-F3AE-467D-8B40-4F59F54AD02E (Friendly Name: br-data_External) to port FCE16640-4EDA-4BB5-B8C9-48096BA0F81D (Friendly Name: 02f2b274-d279-4863-a19e-b485584f6b98).250410180-92233720368547758083162Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29204160n-h2-773644-4.cbci-773644-4.local6/1/2021 12:05:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F734834C-6679-438E-8816-AB30E8387B7F--71C12AC9-83EB-41B1-990B-F395DCCFB43A (Friendly Name: 02f2b274-d279-4863-a19e-b485584f6b98) successfully connected to port FCE16640-4EDA-4BB5-B8C9-48096BA0F81D (Friendly Name: 02f2b274-d279-4863-a19e-b485584f6b98) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083161Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37844468n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4147413836-1133405817-816518792-21387819286/1/2021 12:05:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F734834C-6679-438E-8816-AB30E8387B7F--71C12AC9-83EB-41B1-990B-F395DCCFB43A (Friendly Name: ).2330400-92233720368547758083160Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37844468n-h2-773644-4.cbci-773644-4.local6/1/2021 12:05:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD642DDF-6EAB-46A5-BE3C-8712577CE5D2--A54A7FCD-DA17-4986-809D-C0062B9A93FB (Friendly Name: 7f950e05-754e-476d-b3b5-a6f03fd14984) successfully connected to port 0D79C2C2-0E14-4BBD-90E7-E2035717DD31 (Friendly Name: 7f950e05-754e-476d-b3b5-a6f03fd14984) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083159Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26243228n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2909023711-1185246891-310852798-35382549356/1/2021 12:04:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AD642DDF-6EAB-46A5-BE3C-8712577CE5D2--A54A7FCD-DA17-4986-809D-C0062B9A93FB (Friendly Name: ).2330400-92233720368547758083158Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26243228n-h2-773644-4.cbci-773644-4.local6/1/2021 12:04:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 65EFDE8F-2BBB-4366-A1CB-D90C4DA3FCB4--C109A15B-0EEA-402D-B4DC-A26614C528CF (Friendly Name: 61950116-d2a8-4e4c-aa41-b5f55842acb0) successfully connected to port C59BED26-87B8-4C65-AAD0-B22AF3E0520C (Friendly Name: 61950116-d2a8-4e4c-aa41-b5f55842acb0) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083157Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29205104n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1710218895-1130769339-215600033-30364557576/1/2021 12:04:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 65EFDE8F-2BBB-4366-A1CB-D90C4DA3FCB4--C109A15B-0EEA-402D-B4DC-A26614C528CF (Friendly Name: ).2330400-92233720368547758083156Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29205104n-h2-773644-4.cbci-773644-4.local6/1/2021 12:04:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 9A612E79-84D1-4ED1-8759-AEFE6CA85990--9457EF21-A452-421A-BCE2-191F24B37669 (Friendly Name: 84d8d32d-df4b-4cc7-9223-5bdfe7d27dd2).2330400-92233720368547758083155Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43203324n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2590060153-1322353873-4272839047-24217949246/1/2021 12:04:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9A612E79-84D1-4ED1-8759-AEFE6CA85990--9457EF21-A452-421A-BCE2-191F24B37669 successfully disconnected from port .2340400-92233720368547758083154Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43203324n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2590060153-1322353873-4272839047-24217949246/1/2021 12:04:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the running state.7036016384400-91873432398358118403153Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 12:04:18 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403152Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 12:04:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403151Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 12:04:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 639CC37A-368E-4233-A041-593154AF7EFD--9D135C13-8F4A-4B8B-A8D7-2941C7B5BEBB (Friendly Name: 7b23b981-7c93-479c-8b2f-c0055a79632a) successfully connected to port 82D564B7-4DEE-4176-A9EF-33C9966FDEA4 (Friendly Name: 7b23b981-7c93-479c-8b2f-c0055a79632a) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083150Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10482368n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1671218042-1110652558-827933088-42529380686/1/2021 12:04:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 639CC37A-368E-4233-A041-593154AF7EFD--9D135C13-8F4A-4B8B-A8D7-2941C7B5BEBB (Friendly Name: ).2330400-92233720368547758083149Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10482368n-h2-773644-4.cbci-773644-4.local6/1/2021 12:04:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403148Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 12:04:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403147Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 12:04:08 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0AA9A0F8-FABE-41F3-84F5-4D6BD90BFF46--44A4BB1C-86C9-4E58-B99D-481E2F8D6F32 (Friendly Name: 1b55fa92-16c2-48ce-81d5-654f0b59a3f4).2330400-92233720368547758083146Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35163416n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-178888952-1106508478-1800271236-11911198336/1/2021 12:04:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0AA9A0F8-FABE-41F3-84F5-4D6BD90BFF46--44A4BB1C-86C9-4E58-B99D-481E2F8D6F32 successfully disconnected from port .2340400-92233720368547758083145Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35163416n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-178888952-1106508478-1800271236-11911198336/1/2021 12:04:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B7A13626-499A-48A3-B6B9-3B36D91F30CF--EA36B73E-759F-4045-89BF-B36E23584449 (Friendly Name: 781c6df1-7828-4612-8455-43e38e05205d).2330400-92233720368547758083144Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4384316n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3080795686-1218660762-909883830-34760375936/1/2021 12:04:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B7A13626-499A-48A3-B6B9-3B36D91F30CF--EA36B73E-759F-4045-89BF-B36E23584449 successfully disconnected from port .2340400-92233720368547758083143Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4384316n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3080795686-1218660762-909883830-34760375936/1/2021 12:04:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9A612E79-84D1-4ED1-8759-AEFE6CA85990--9457EF21-A452-421A-BCE2-191F24B37669 (Friendly Name: 84d8d32d-df4b-4cc7-9223-5bdfe7d27dd2) successfully connected to port 47BCC6CF-60E8-475F-A129-8822D7A8703B (Friendly Name: 84d8d32d-df4b-4cc7-9223-5bdfe7d27dd2) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083142Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43203324n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2590060153-1322353873-4272839047-24217949246/1/2021 12:03:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 9A612E79-84D1-4ED1-8759-AEFE6CA85990--9457EF21-A452-421A-BCE2-191F24B37669 (Friendly Name: ).2330400-92233720368547758083141Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43203324n-h2-773644-4.cbci-773644-4.local6/1/2021 12:03:59 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B7A13626-499A-48A3-B6B9-3B36D91F30CF--EA36B73E-759F-4045-89BF-B36E23584449 (Friendly Name: 781c6df1-7828-4612-8455-43e38e05205d) successfully connected to port 8C31AB8D-8DEC-42FA-A084-E5652DBC3D89 (Friendly Name: 781c6df1-7828-4612-8455-43e38e05205d) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083140Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4384316n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3080795686-1218660762-909883830-34760375936/1/2021 12:03:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B7A13626-499A-48A3-B6B9-3B36D91F30CF--EA36B73E-759F-4045-89BF-B36E23584449 (Friendly Name: ).2330400-92233720368547758083139Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4384316n-h2-773644-4.cbci-773644-4.local6/1/2021 12:03:56 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 70A90944-A75A-4D78-9D8D-CFC22BCE0D89--63C943DD-0760-4544-8A0C-6784DABE7F62 (Friendly Name: bdb76d01-6d6f-4a56-b959-8ef5e904e561).2330400-92233720368547758083138Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5924764n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1890126148-1299752794-3268382109-22993833396/1/2021 12:03:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 70A90944-A75A-4D78-9D8D-CFC22BCE0D89--63C943DD-0760-4544-8A0C-6784DABE7F62 successfully disconnected from port .2340400-92233720368547758083137Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5924764n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1890126148-1299752794-3268382109-22993833396/1/2021 12:03:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 37EE4605-51BA-4A8E-9C8E-F388E5D0CF23--69A47A77-ABBB-46E3-A080-3FB61E00BBB0 (Friendly Name: aef42fc4-9030-4fef-af68-f16aa2c6dcda).2330400-92233720368547758083136Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3602544n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-938362373-1250841018-2297663132-6008219896/1/2021 12:03:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 37EE4605-51BA-4A8E-9C8E-F388E5D0CF23--69A47A77-ABBB-46E3-A080-3FB61E00BBB0 successfully disconnected from port .2340400-92233720368547758083135Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3602544n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-938362373-1250841018-2297663132-6008219896/1/2021 12:03:48 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B18F2CF3-9B9C-4A6D-848D-B7E695037366--2F42FC5E-EF07-455B-8654-5F7A3A009440 (Friendly Name: 00ccd3ac-70f4-4f1c-99a6-ffed8d80a5e8) successfully connected to port 8AE9A83B-A13B-48A0-9413-A8BB93C23231 (Friendly Name: 00ccd3ac-70f4-4f1c-99a6-ffed8d80a5e8) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083134Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48363256n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2978950387-1248697244-3870788996-17188135896/1/2021 12:03:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B18F2CF3-9B9C-4A6D-848D-B7E695037366--2F42FC5E-EF07-455B-8654-5F7A3A009440 (Friendly Name: ).2330400-92233720368547758083133Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48363256n-h2-773644-4.cbci-773644-4.local6/1/2021 12:03:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403132Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 12:03:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403131Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 12:03:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 37EE4605-51BA-4A8E-9C8E-F388E5D0CF23--69A47A77-ABBB-46E3-A080-3FB61E00BBB0 (Friendly Name: aef42fc4-9030-4fef-af68-f16aa2c6dcda) successfully connected to port 99B6B173-45CB-43FD-940E-9EB4F579D8C9 (Friendly Name: aef42fc4-9030-4fef-af68-f16aa2c6dcda) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083130Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3602856n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-938362373-1250841018-2297663132-6008219896/1/2021 12:03:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 37EE4605-51BA-4A8E-9C8E-F388E5D0CF23--69A47A77-ABBB-46E3-A080-3FB61E00BBB0 (Friendly Name: ).2330400-92233720368547758083129Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3602856n-h2-773644-4.cbci-773644-4.local6/1/2021 12:03:33 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 70A90944-A75A-4D78-9D8D-CFC22BCE0D89--63C943DD-0760-4544-8A0C-6784DABE7F62 (Friendly Name: bdb76d01-6d6f-4a56-b959-8ef5e904e561) successfully connected to port 1975609A-A949-4416-81B7-11A28FCB3513 (Friendly Name: bdb76d01-6d6f-4a56-b959-8ef5e904e561) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083128Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5924764n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1890126148-1299752794-3268382109-22993833396/1/2021 12:03:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 70A90944-A75A-4D78-9D8D-CFC22BCE0D89--63C943DD-0760-4544-8A0C-6784DABE7F62 (Friendly Name: ).2330400-92233720368547758083127Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5924764n-h2-773644-4.cbci-773644-4.local6/1/2021 12:03:29 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 96BCE603-B307-4787-9B93-F3AC33632A10--BCE32A2F-27F0-4CB2-BA72-427004DAAE8C (Friendly Name: e38899c2-9dd2-44d2-9ff5-4eee93d39631).2330400-92233720368547758083126Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1580736n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2528962051-1200075527-2901644187-2712133636/1/2021 12:03:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 96BCE603-B307-4787-9B93-F3AC33632A10--BCE32A2F-27F0-4CB2-BA72-427004DAAE8C successfully disconnected from port .2340400-92233720368547758083125Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1580736n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2528962051-1200075527-2901644187-2712133636/1/2021 12:03:04 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 20E2AE86-6F31-4CC0-BE2D-BC78478132DF--64FD19D5-1D1F-4512-B30C-9A30630E03BF (Friendly Name: fc577dd2-a302-47f7-b497-13752391bc4b).2330400-92233720368547758083124Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9481760n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-551726726-1287679793-2025598398-37446290636/1/2021 12:02:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 20E2AE86-6F31-4CC0-BE2D-BC78478132DF--64FD19D5-1D1F-4512-B30C-9A30630E03BF successfully disconnected from port .2340400-92233720368547758083123Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9481760n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-551726726-1287679793-2025598398-37446290636/1/2021 12:02:51 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 20E2AE86-6F31-4CC0-BE2D-BC78478132DF--64FD19D5-1D1F-4512-B30C-9A30630E03BF (Friendly Name: fc577dd2-a302-47f7-b497-13752391bc4b) successfully connected to port 7ADE549C-E50B-4CE9-8D92-D17B5AE3400C (Friendly Name: fc577dd2-a302-47f7-b497-13752391bc4b) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083122Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9481036n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-551726726-1287679793-2025598398-37446290636/1/2021 12:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 20E2AE86-6F31-4CC0-BE2D-BC78478132DF--64FD19D5-1D1F-4512-B30C-9A30630E03BF (Friendly Name: ).2330400-92233720368547758083121Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9481036n-h2-773644-4.cbci-773644-4.local6/1/2021 12:02:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 508E6ECE-6C27-4F8D-AC54-E3C6B295CDB7--3CD43FE3-55E6-4B9F-82B1-289751684FC1 (Friendly Name: 671fc6ba-02da-4eab-b674-44f37080b9de) successfully connected to port 49B8CBB4-479B-4A36-9FF5-D73522326B44 (Friendly Name: 671fc6ba-02da-4eab-b674-44f37080b9de) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083120Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41762812n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-1351511758-1334668327-3336787116-30837037306/1/2021 12:02:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 508E6ECE-6C27-4F8D-AC54-E3C6B295CDB7--3CD43FE3-55E6-4B9F-82B1-289751684FC1 (Friendly Name: ).2330400-92233720368547758083119Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41762812n-h2-773644-4.cbci-773644-4.local6/1/2021 12:02:40 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 96BCE603-B307-4787-9B93-F3AC33632A10--BCE32A2F-27F0-4CB2-BA72-427004DAAE8C (Friendly Name: e38899c2-9dd2-44d2-9ff5-4eee93d39631) successfully connected to port 8E1E9CF7-79FE-4A3F-85D6-1005B677334F (Friendly Name: e38899c2-9dd2-44d2-9ff5-4eee93d39631) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083118Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1580736n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-2528962051-1200075527-2901644187-2712133636/1/2021 12:02:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 96BCE603-B307-4787-9B93-F3AC33632A10--BCE32A2F-27F0-4CB2-BA72-427004DAAE8C (Friendly Name: ).2330400-92233720368547758083117Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1580736n-h2-773644-4.cbci-773644-4.local6/1/2021 12:02:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403116Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 12:02:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403115Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 12:02:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403114Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 12:02:36 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F8179B01-4D79-463D-9D70-E82886DCFBBC--3181EDB7-3020-4AAD-BB41-CC9CC81FDCBA (Friendly Name: 106883ac-4bad-4857-8473-cedfecc459c5).2330400-92233720368547758083113Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40444308n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4162296577-1178422649-686321821-31706225986/1/2021 12:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F8179B01-4D79-463D-9D70-E82886DCFBBC--3181EDB7-3020-4AAD-BB41-CC9CC81FDCBA successfully disconnected from port .2340400-92233720368547758083112Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40444308n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4162296577-1178422649-686321821-31706225986/1/2021 12:02:19 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F8179B01-4D79-463D-9D70-E82886DCFBBC--3181EDB7-3020-4AAD-BB41-CC9CC81FDCBA (Friendly Name: 106883ac-4bad-4857-8473-cedfecc459c5) successfully connected to port 05DBA62A-8886-4874-9AB4-E7756D0EE673 (Friendly Name: 106883ac-4bad-4857-8473-cedfecc459c5) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083111Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40444384n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-4162296577-1178422649-686321821-31706225986/1/2021 12:02:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F8179B01-4D79-463D-9D70-E82886DCFBBC--3181EDB7-3020-4AAD-BB41-CC9CC81FDCBA (Friendly Name: ).2330400-92233720368547758083110Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem40444384n-h2-773644-4.cbci-773644-4.local6/1/2021 12:02:13 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0AA9A0F8-FABE-41F3-84F5-4D6BD90BFF46--44A4BB1C-86C9-4E58-B99D-481E2F8D6F32 (Friendly Name: 1b55fa92-16c2-48ce-81d5-654f0b59a3f4) successfully connected to port 9A58471D-3B1F-4962-A294-C639D3B8035C (Friendly Name: 1b55fa92-16c2-48ce-81d5-654f0b59a3f4) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083109Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35163416n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-178888952-1106508478-1800271236-11911198336/1/2021 12:02:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0AA9A0F8-FABE-41F3-84F5-4D6BD90BFF46--44A4BB1C-86C9-4E58-B99D-481E2F8D6F32 (Friendly Name: ).2330400-92233720368547758083108Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35163416n-h2-773644-4.cbci-773644-4.local6/1/2021 12:02:11 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Status 0x00001069 determining that device interface \\?\{8e7bd593-6e6c-4c52-86a6-77175494dd8e}#MsVhdHba#1&3030e83&0&01#{2accfe60-c130-11d2-b082-00a0c91efb8b} does not support iSCSI WMI interfaces. If this device is not an iSCSI HBA then this error can be ignored. 108030360287970189639683107MSiSCSISystemn-h2-773644-4.cbci-773644-4.local6/1/2021 12:02:07 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CE0A6426-9336-48A6-9A72-D6F6A2DAD7C4--30A33C71-4E83-4101-9BA5-2B2DD643DB7B (Friendly Name: 5fed54f2-47a3-4995-af17-881c62b46431).2330400-92233720368547758083106Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32323652n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3456787494-1218876214-4141249178-33024805466/1/2021 12:01:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CE0A6426-9336-48A6-9A72-D6F6A2DAD7C4--30A33C71-4E83-4101-9BA5-2B2DD643DB7B successfully disconnected from port .2340400-92233720368547758083105Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32323652n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3456787494-1218876214-4141249178-33024805466/1/2021 12:01:49 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CE0A6426-9336-48A6-9A72-D6F6A2DAD7C4--30A33C71-4E83-4101-9BA5-2B2DD643DB7B (Friendly Name: 5fed54f2-47a3-4995-af17-881c62b46431) successfully connected to port A2DF1D7B-624B-496A-9BED-B9FDCC616DD4 (Friendly Name: 5fed54f2-47a3-4995-af17-881c62b46431) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758083104Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32323652n-h2-773644-4.cbci-773644-4.localS-1-5-83-1-3456787494-1218876214-4141249178-33024805466/1/2021 12:01:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CE0A6426-9336-48A6-9A72-D6F6A2DAD7C4--30A33C71-4E83-4101-9BA5-2B2DD643DB7B (Friendly Name: ).2330400-92233720368547758083103Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem32323652n-h2-773644-4.cbci-773644-4.local6/1/2021 12:01:46 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403102Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 12:01:41 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403101Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 12:01:39 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403100Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 12:01:37 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Biometric Service service entered the stopped state.7036016384400-91873432398358118403099Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 12:01:16 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403098Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 12:01:02 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403097Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 12:00:35 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403096Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 12:00:31 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Downloaded Maps Manager service entered the stopped state.7036016384400-91873432398358118403095Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 12:00:10 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Error Reporting Service service entered the stopped state.7036016384400-91873432398358118403094Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 12:00:06 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the running state.7036016384400-91873432398358118403093Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 12:00:03 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403092Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 12:00:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the running state.7036016384400-91873432398358118403091Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 12:00:01 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Downloaded Maps Manager service entered the running state.7036016384400-91873432398358118403090Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 12:00:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Service Host service entered the running state.7036016384400-91873432398358118403089Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 12:00:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic System Host service entered the running state.7036016384400-91873432398358118403088Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 12:00:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the running state.7036016384400-91873432398358118403087Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 12:00:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the running state.7036016384400-91873432398358118403086Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 12:00:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system uptime is 133 seconds.60133276840360287970189639683085EventLogSystemn-h2-773644-4.cbci-773644-4.local6/1/2021 12:00:00 PMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118403084Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 11:59:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118403083Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 11:59:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The neutron-hyperv-agent service entered the running state.7036016384400-91873432398358118403082Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user CBCI-773644-4\administrator SID (S-1-5-21-2018356169-2919801786-2371670010-500) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403081Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9841784n-h2-773644-4.cbci-773644-4.localS-1-5-21-2018356169-2919801786-2371670010-5006/1/2021 11:58:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the neutron-hyperv-agent service was changed from demand start to auto start.7040016384400-91873432398358118403080Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.localS-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:58:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nova-compute service entered the running state.7036016384400-91873432398358118403079Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user CBCI-773644-4\administrator SID (S-1-5-21-2018356169-2919801786-2371670010-500) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403078Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9841784n-h2-773644-4.cbci-773644-4.localS-1-5-21-2018356169-2919801786-2371670010-5006/1/2021 11:58:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nova-compute service was changed from demand start to auto start.7040016384400-91873432398358118403077Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.localS-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:58:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the stopped state.7036016384400-91873432398358118403076Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403075Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083074Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14643500n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:58:35 AM187bffb5-c9a4-4a78-8245-99353221f5f6systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403073Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083072Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14643500n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:58:26 AMb6ae714a-08c6-417e-baa2-f4d616b2c660systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source VM IC Time Synchronization Provider.350400-92233720368547758083071Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem961192n-h2-773644-4.cbci-773644-4.localS-1-5-196/1/2021 11:58:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wisvc service entered the running state.7036016384400-91873432398358118403070Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 100 milliseconds: Run the configured recovery program.7031049152200-91873432398358118403069Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Application popup: Windows - Bad Image : Exception Processing Message 0xc000007b Parameters 0x7ffe5ae01d28 0xffffffffc0000428 0x7ffe5ae01d28 0x7ffe5ae01d28260400-92233720368547758083068Application Popup47bfa2b7-bd54-4fac-b70b-29021084ca8fSystem580876n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:58:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the stopped state.7036016384400-91873432398358118403067Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the stopped state.7036016384400-91873432398358118403066Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639683065Virtual Disk ServiceSystemn-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the running state.7036016384400-91873432398358118403064Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639683063Virtual Disk ServiceSystemn-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from n-ad-773644-4.cbci-773644-4.local (ntp.d|0.0.0.0:123->10.222.0.20:123).370400-92233720368547758083062Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem961192n-h2-773644-4.cbci-773644-4.localS-1-5-196/1/2021 11:58:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118403061Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Error Reporting Service service entered the running state.7036016384400-91873432398358118403060Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\cloudbase-init SID (S-1-5-21-1249627717-4114815304-3679761778-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403059Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9841056n-h2-773644-4.cbci-773644-4.localS-1-5-21-1249627717-4114815304-3679761778-10006/1/2021 11:58:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system failed to register pointer (PTR) resource records (RRs) for network adapter with settings: Adapter Name : {2B9AFE51-8578-405B-B7FE-F385058552EA} Host Name : n-h2-773644-4 Adapter-specific Domain Suffix : cbci-773644-4.local DNS server list : 10.222.0.20, 8.8.8.8, 4.4.4.4 Sent update to server : <?> IP Address : 10.222.0.15 The reason the system could not register these RRs during the update request was because of a system problem. You can manually retry DNS registration of the network adapter and its settings by typing 'ipconfig /registerdns' at the command prompt. If problems still persist, contact your DNS server or network systems administrator. See event details for specific error code information.8014041028046116860184273879043058Microsoft-Windows-DNS-Client1c95126e-7eea-49a9-a3fe-a378b03ddb4dSystem11283084n-h2-773644-4.cbci-773644-4.localS-1-5-206/1/2021 11:58:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403057Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083056Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14643500n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:58:03 AM8eb4ee3c-0201-4985-b4fa-ffa64df9f1b4systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The swprv service entered the running state.7036016384400-91873432398358118403055Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wuauserv service entered the running state.7036016384400-91873432398358118403054Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmcompute service entered the running state.7036016384400-91873432398358118403053Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403052Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The firewall exception to allow Internet Storage Name Server (iSNS) client functionality is not enabled. iSNS client functionality is not available.121030360287970189639683051MSiSCSISystemn-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083050Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14642908n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:58:01 AMd8534118-2921-4489-8d2d-81195b275711systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the stopped state.7036016384400-91873432398358118403049Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403048Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9841016n-h2-773644-4.cbci-773644-4.localS-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:58:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MSiSCSI service entered the running state.7036016384400-91873432398358118403047Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 11:58:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the running state.7036016384400-91873432398358118403046Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118403045Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804808n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\cloudbase-init SID (S-1-5-21-1249627717-4114815304-3679761778-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403044Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9841016n-h2-773644-4.cbci-773644-4.localS-1-5-21-1249627717-4114815304-3679761778-10006/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118403043Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981443042Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4208n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:10.222.0.15 has been brought up.42000400-92233720368547758083041Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System14642264n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981443040Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem42772n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The KeyIso service entered the running state.7036016384400-91873432398358118403039Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118403038Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804528n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118403037Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804528n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A new self signed certificate to be used for RD Session Host Server authentication on SSL connections was generated. The name on this certificate is n-h2-773644-4.cbci-773644-4.local. The SHA1 hash of the certificate is in the event data.1056049152400360287970189639683036Microsoft-Windows-TerminalServices-RemoteConnectionManagerc76baa63-ae81-421c-b425-340b4b24157fSystem00n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118403035Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118403034Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118403033Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118403032Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118403031Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804904n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118403030Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804528n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118403029Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118403028Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118403027Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804528n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SessionEnv service entered the running state.7036016384400-91873432398358118403026Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118403025Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118403024Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118403023Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804900n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118403022Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041084n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118403021Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042460n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403020Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804908n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118403019Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118403018Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the running state.7036016384400-91873432398358118403017Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118403016Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKEEXT service entered the running state.7036016384400-91873432398358118403015Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CertPropSvc service entered the running state.7036016384400-91873432398358118403014Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118403013Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Netlogon service entered the running state.7036016384400-91873432398358118403012Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118403011Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639683010Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118403009Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UmRdpService service entered the running state.7036016384400-91873432398358118403008Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118403007Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041308n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118403006Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118403005Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041308n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118403004Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118403003Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118403002Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118403001Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041308n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PolicyAgent service entered the running state.7036016384400-91873432398358118403000Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041308n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: Microsoft Hyper-V Network Adapter) is now operational.230410160-92233720368547758082999Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4508n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082998Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4508n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' paused100410030-92233720368547758082997Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4508n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcbService service entered the running state.7036016384400-91873432398358118402996Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the running state.7036016384400-91873432398358118402995Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402994Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041308n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402993Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402992Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402991Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402990Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041308n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402989Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402988Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402987Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402986Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402985Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402984Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402983Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041304n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442982Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4508n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442981Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4508n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402980Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041096n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442979Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4508n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402978Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?06?-?01T11:57:57.366000000Z from ?2021?-?06?-?01T11:57:57.308471200Z. Change Reason: An application or system component changed the time.11450-92233720368547757922977Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem6041364n-h2-773644-4.cbci-773644-4.localS-1-5-196/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402976Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402975Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402974Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804576n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402973Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041328n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402972Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041080n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522971Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System6041248n-h2-773644-4.cbci-773644-4.localS-1-5-196/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522970Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem6041124n-h2-773644-4.cbci-773644-4.localS-1-5-196/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TermService service entered the running state.7036016384400-91873432398358118402969Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804908n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402968Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402967Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804616n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402966Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041092n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402965Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402964Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402963Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402962Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402961Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402960Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402959Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402958Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804912n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082957Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem820824n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:55 AM56e86b82-56dd-0005-856b-e856dd56d701systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042956Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem692696n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082955Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4388n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: Microsoft Hyper-V Network Adapter) is now operational.230410160-92233720368547758082954Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082953Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: Microsoft Hyper-V Network Adapter) is no longer operational.240410170-92233720368547758082952Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Protocol NIC /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: Microsoft Hyper-V Network Adapter) successfully bound to port 646218F0-F3AE-467D-8B40-4F59F54AD02E (Friendly Name: br-data_External) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).170410120-92233720368547758082951Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: Microsoft Hyper-V Network Adapter) successfully connected to port 646218F0-F3AE-467D-8B40-4F59F54AD02E (Friendly Name: br-data_External) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758082950Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully updated NIC NDIS QoS with Miniport NIC /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: Microsoft Hyper-V Network Adapter)1910400-92233720368547758082949Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: ).2330400-92233720368547758082948Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082947Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4388n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082946Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082945Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082944Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082943Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4208n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082942Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4208n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082941Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4208n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082940Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4208n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082939Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4208n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082938Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4208n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082937Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4388n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082936Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
If Digest support selected for iSCSI Session, Will use Processor support for Digest computation.671638440360287970189639682935iScsiPrtSystemn-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Switch 97E6B894-8062-4F0B-B47B-387DE545AC0A (Friendly Name: br-data) successfully initialized.90410050-92233720368547758082934Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4208n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 97E6B894-8062-4F0B-B47B-387DE545AC0A (Friendly Name: br-data) successfully connected to port 97E6B894-8062-4F0B-B47B-387DE545AC0A (Friendly Name: br-data) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758082933Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4208n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 97E6B894-8062-4F0B-B47B-387DE545AC0A (Friendly Name: br-data).2330400-92233720368547758082932Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4208n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802931Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802930Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4312n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442929Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682928VfpExtSystemn-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442927Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume C: (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062926Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4208n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442925Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442924Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442923Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442922Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442921Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442920Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082919Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082918Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082917Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082916Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082915Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082914Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2021?-?06?-?01T11:57:47.499993500Z.120410-92233720368547756802913Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48n-h2-773644-4.cbci-773644-4.localS-1-5-186/1/2021 11:57:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2021?-?06?-?01T11:57:40.436584700Z.130420-92233720368547756802912Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem44408n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->51.105.208.173:123).370400-92233720368547758082911Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14361496n-h2-773644-4.cbci-773644-4.localS-1-5-196/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162910Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System684688n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system uptime is 10 seconds.60133276840360287970189639682909EventLogSystemn-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682908EventLogSystemn-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682907EventLogSystemn-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services service entered the stopped state.7036016384400-91873432398358118402906Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402905Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402904Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402903Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402902Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402901Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-4.cbci-773644-4.local6/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKE and AuthIP IPsec Keying Modules service entered the stopped state.7036016384400-91873432398358118402900Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the stopped state.7036016384400-91873432398358118402899Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402898Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402897Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402896Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402895Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522894Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem14281544n-h2-773644-4S-1-5-196/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service entered the stopped state.7036016384400-91873432398358118402893Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402892Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the stopped state.7036016384400-91873432398358118402891Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the stopped state.7036016384400-91873432398358118402890Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522889Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System14281572n-h2-773644-4S-1-5-196/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402888Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402887Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Software Shadow Copy Provider service entered the stopped state.7036016384400-91873432398358118402886Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IPsec Policy Agent service entered the stopped state.7036016384400-91873432398358118402885Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Service Host service entered the stopped state.7036016384400-91873432398358118402884Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic System Host service entered the stopped state.7036016384400-91873432398358118402883Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964168n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402882Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964168n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402881Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7963732n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Initiator Service service entered the stopped state.7036016384400-91873432398358118402880Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7964788n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402879Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7963732n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?06?-?01T11:57:39.192000000Z from ?2021?-?06?-?01T11:57:39.216218100Z. Change Reason: An application or system component changed the time.11450-92233720368547757922878Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14361504n-h2-773644-4S-1-5-196/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Install Service service entered the stopped state.7036016384400-91873432398358118402877Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796100n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services UserMode Port Redirector service entered the stopped state.7036016384400-91873432398358118402876Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796100n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402875Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962644n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HV Host Service service entered the stopped state.7036016384400-91873432398358118402874Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7963804n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402873Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962644n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682872EventLogSystemn-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is not listening for WS-Management requests. User Action If you did not intentionally stop the service, use the following command to see the WinRM configuration: winrm enumerate winrm/config/listener1014907300360287970189639682871Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00n-h2-773644-46/1/2021 11:57:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the stopped state.7036016384400-91873432398358118402870Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:57:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402869Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:57:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402868Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:57:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402867Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:57:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402866Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:57:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\system32\shutdown.exe (N-H2-773644-4) has initiated the restart of computer N-H2-773644-4 on behalf of user N-H2-773644-4\Admin for the following reason: No title for this reason could be found Reason Code: 0x800000ff Shutdown Type: restart Comment: Reboot initiated by Ansible1074032768400-91873432398358118402865User32b0aa8734-56f7-41cc-b2f4-de228e98b946System588604n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:57:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402864Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9522960n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:57:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Netlogon service entered the running state.7036016384400-91873432398358118402863Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962644n-h2-773644-46/1/2021 11:57:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The machine n-h2-773644-4 successfully joined the domain cbci-773644-4.local.40960400-92233720368547758082862NetJoin9741fd4e-3757-479f-a3c6-fc49f6d5edd0System13322068n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:57:34 AM00000000-0000-0000-0100-000000000000systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Connectivity Assistant service entered the stopped state.7036016384400-91873432398358118402861Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962644n-h2-773644-46/1/2021 11:57:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
This computer has been successfully joined to domain 'cbci-773644-4.local'.3260040360287970189639682860WorkstationSystemn-h2-773644-46/1/2021 11:57:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402859Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9522960n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:57:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402858Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9522960n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:57:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402857Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9522960n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:57:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402856Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9522960n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:57:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402855Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:57:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402854Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:55:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402853Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:54:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402852Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:50:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402851Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:42:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402850Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:41:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402849Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:41:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The firewall exception to allow Internet Storage Name Server (iSNS) client functionality is not enabled. iSNS client functionality is not available.121030360287970189639682848MSiSCSISystemn-h2-773644-46/1/2021 11:40:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Initiator Service service entered the running state.7036016384400-91873432398358118402847Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:40:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118402846Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:40:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the running state.7036016384400-91873432398358118402845Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:40:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
If Digest support selected for iSCSI Session, Will use Processor support for Digest computation.671638440360287970189639682844iScsiPrtSystemn-h2-773644-46/1/2021 11:40:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118402843Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:40:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft iSCSI Initiator Service service was changed from demand start to auto start.7040016384400-91873432398358118402842Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:40:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402841Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:40:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402840Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:40:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402839Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:40:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402838Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:40:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402837Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:39:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402836Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:39:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402835Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:39:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402834Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:39:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402833Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:39:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402832Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:39:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402831Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:38:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402830Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:38:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402829Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:38:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402828Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:38:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402827Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796868n-h2-773644-46/1/2021 11:38:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402826Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796868n-h2-773644-46/1/2021 11:38:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402825Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796868n-h2-773644-46/1/2021 11:38:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->51.105.208.173:123).370400-92233720368547758082824Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14361496n-h2-773644-4S-1-5-196/1/2021 11:37:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402823Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:37:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402822Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:36:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402821Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:36:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402820Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:36:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402819Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:36:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402818Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:36:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402817Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:36:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402816Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:36:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402815Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:36:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402814Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem952996n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:36:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402813Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:35:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118402812Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:35:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402811Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:35:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402810Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796868n-h2-773644-46/1/2021 11:35:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->51.105.208.173:123).370400-92233720368547758082809Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14361520n-h2-773644-4S-1-5-196/1/2021 11:35:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WMI Performance Adapter service entered the stopped state.7036016384400-91873432398358118402808Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:35:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118402807Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:34:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118402806Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:34:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Registry service entered the stopped state.7036016384400-91873432398358118402805Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:34:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Installer service entered the stopped state.7036016384400-91873432398358118402804Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:34:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The App Readiness service entered the stopped state.7036016384400-91873432398358118402803Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:34:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402802Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:33:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402801Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:31:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the stopped state.7036016384400-91873432398358118402800Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:31:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402799Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:30:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402798Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:30:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402797Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:30:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the running state.7036016384400-91873432398358118402796Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:30:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402795Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:30:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402794Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402793Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402792Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402791Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:29:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402790Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402789Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402788Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402787Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402786Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:29:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402785Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402784Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402783Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Installer service entered the running state.7036016384400-91873432398358118402782Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:29:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402781Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402780Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402779Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402778Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402777Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:29:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WMI Performance Adapter service entered the running state.7036016384400-91873432398358118402776Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961688n-h2-773644-46/1/2021 11:29:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WMI Performance Adapter service entered the stopped state.7036016384400-91873432398358118402775Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961688n-h2-773644-46/1/2021 11:29:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402774Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:28:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402773Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961688n-h2-773644-46/1/2021 11:28:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402772Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961688n-h2-773644-46/1/2021 11:28:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118402771Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961688n-h2-773644-46/1/2021 11:28:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402770Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:28:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402769Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:28:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->51.105.208.173:123).370400-92233720368547758082768Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14363496n-h2-773644-4S-1-5-196/1/2021 11:28:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402767Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:28:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Error Reporting Service service entered the stopped state.7036016384400-91873432398358118402766Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961688n-h2-773644-46/1/2021 11:28:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402765Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961688n-h2-773644-46/1/2021 11:28:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402764Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:28:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushsvc service entered the stopped state.7036016384400-91873432398358118402763Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961688n-h2-773644-46/1/2021 11:28:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402762Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-206/1/2021 11:28:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402761Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-206/1/2021 11:28:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402760Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:28:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402759Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:28:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402758Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:28:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402757Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:28:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Biometric Service service entered the stopped state.7036016384400-91873432398358118402756Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961688n-h2-773644-46/1/2021 11:28:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402755Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:28:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402754Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:28:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402753Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:28:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402752Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521012n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:27:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402751Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:27:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118402750Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:27:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402749Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem952996n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:27:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402748Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem952996n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:27:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->51.105.208.173:123).370400-92233720368547758082747Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14361516n-h2-773644-4S-1-5-196/1/2021 11:27:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402746Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521824n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:27:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->51.105.208.173:123).370400-92233720368547758082745Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14361500n-h2-773644-4S-1-5-196/1/2021 11:27:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: Microsoft Hyper-V Network Adapter) successfully connected to port 646218F0-F3AE-467D-8B40-4F59F54AD02E (Friendly Name: br-data_External) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758082744Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24842904n-h2-773644-4S-1-5-186/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: Microsoft Hyper-V Network Adapter) is now operational.230410160-92233720368547758082743Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem556496n-h2-773644-46/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082742Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem556496n-h2-773644-4S-1-5-186/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: Microsoft Hyper-V Network Adapter) is no longer operational.240410170-92233720368547758082741Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem556496n-h2-773644-46/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: Microsoft Hyper-V Network Adapter) is no longer operational.240410170-92233720368547758082740Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem556496n-h2-773644-46/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Protocol NIC /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: Microsoft Hyper-V Network Adapter) successfully bound to port (Friendly Name: ) on switch (Friendly Name: ).170410120-92233720368547758082739Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem556496n-h2-773644-4S-1-5-186/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully updated NIC NDIS QoS with Miniport NIC /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: Microsoft Hyper-V Network Adapter)1910400-92233720368547758082738Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem556496n-h2-773644-46/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic /DEVICE/{68A8C9BB-1993-40F6-856C-A803270EEC3A} (Friendly Name: ).2330400-92233720368547758082737Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem556496n-h2-773644-46/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' paused100410030-92233720368547758082736Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem556496n-h2-773644-4S-1-5-186/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082735Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem42176n-h2-773644-4S-1-5-186/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082734Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4228n-h2-773644-4S-1-5-186/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082733Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h2-773644-46/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082732Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4228n-h2-773644-4S-1-5-186/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' is halting60410030-92233720368547758082731Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem41380n-h2-773644-4S-1-5-186/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal is no longer active.42010400-92233720368547758082730Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System5563004n-h2-773644-4S-1-5-186/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' paused100410030-92233720368547758082729Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem41380n-h2-773644-4S-1-5-186/1/2021 11:27:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Switch 97E6B894-8062-4F0B-B47B-387DE545AC0A (Friendly Name: br-data) successfully initialized.90410050-92233720368547758082728Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2484820n-h2-773644-4S-1-5-186/1/2021 11:27:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 97E6B894-8062-4F0B-B47B-387DE545AC0A (Friendly Name: br-data) successfully connected to port 97E6B894-8062-4F0B-B47B-387DE545AC0A (Friendly Name: br-data) on switch 97E6B894-8062-4F0B-B47B-387DE545AC0A(Friendly Name: br-data).2320400-92233720368547758082727Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2484820n-h2-773644-4S-1-5-186/1/2021 11:27:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 97E6B894-8062-4F0B-B47B-387DE545AC0A (Friendly Name: br-data).2330400-92233720368547758082726Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2484820n-h2-773644-46/1/2021 11:27:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver wvms_mp.inf_amd64_e1065995a017ab1b\wvms_mp.inf for Device Instance ID ROOT\VMS_VSMP\0000 with the following status: 0x0.200010470050-92233720368547758082725Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System1588864n-h2-773644-4S-1-5-186/1/2021 11:27:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: VMSMP Service File Name: \SystemRoot\System32\drivers\vmswitch.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: 7045016384400-91873432398358118402724Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-4S-1-5-186/1/2021 11:27:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402723Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521824n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:27:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the neutron-hyperv-agent service was changed from auto start to demand start.7040016384400-91873432398358118402722Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:27:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: neutron-hyperv-agent Service File Name: c:\openstack\bin\OpenStackService.exe neutron-hyperv-agent c:\python37\scripts\neutron-hyperv-agent.exe --config-file c:\openstack\etc\neutron-hyperv-agent.conf Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem7045016384400-91873432398358118402721Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:27:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nova-compute service was changed from auto start to demand start.7040016384400-91873432398358118402720Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:27:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: nova-compute Service File Name: c:\openstack\bin\OpenStackService.exe nova-compute c:\python37\scripts\nova-compute.exe --config-file c:\openstack\etc\nova.conf Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem7045016384400-91873432398358118402719Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:27:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402718Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521824n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:27:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKE and AuthIP IPsec Keying Modules service entered the running state.7036016384400-91873432398358118402717Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h2-773644-46/1/2021 11:27:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the IKE and AuthIP IPsec Keying Modules service was changed from demand start to auto start.7040016384400-91873432398358118402716Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h2-773644-4S-1-5-186/1/2021 11:27:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402715Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521824n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:27:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118402714Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:27:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Downloaded Maps Manager service entered the stopped state.7036016384400-91873432398358118402713Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:27:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402712Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:27:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402711Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:26:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118402710Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:26:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WMI Performance Adapter service entered the running state.7036016384400-91873432398358118402709Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:26:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the running state.7036016384400-91873432398358118402708Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:26:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402707Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:26:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the running state.7036016384400-91873432398358118402706Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h2-773644-46/1/2021 11:26:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118402705Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h2-773644-46/1/2021 11:26:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Downloaded Maps Manager service entered the running state.7036016384400-91873432398358118402704Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:26:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 100 milliseconds: Run the configured recovery program.7031049152200-91873432398358118402703Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:26:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Service Host service entered the running state.7036016384400-91873432398358118402702Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:26:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic System Host service entered the running state.7036016384400-91873432398358118402701Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:26:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the running state.7036016384400-91873432398358118402700Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:26:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Application popup: Windows - Bad Image : Exception Processing Message 0xc000007b Parameters 0x7ff8bf801d28 0xffffffffc0000428 0x7ff8bf801d28 0x7ff8bf801d28260400-92233720368547758082699Application Popup47bfa2b7-bd54-4fac-b70b-29021084ca8fSystem588604n-h2-773644-4S-1-5-186/1/2021 11:26:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the running state.7036016384400-91873432398358118402698Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:26:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Error Reporting Service service entered the running state.7036016384400-91873432398358118402697Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7962444n-h2-773644-46/1/2021 11:26:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402696Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:26:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402695Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:25:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402694Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521824n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:25:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?06?-?01T11:25:47.408000000Z from ?2021?-?06?-?01T11:25:47.419397100Z. Change Reason: An application or system component changed the time.11450-92233720368547757922693Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14361504n-h2-773644-4S-1-5-196/1/2021 11:25:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the stopped state.7036016384400-91873432398358118402692Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:25:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PolicyAgent service entered the running state.7036016384400-91873432398358118402691Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:25:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SSL Certificate Settings created by an admin process for endpoint : 0.0.0.0:5986 .15301032768300360287970189639682690Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System4512n-h2-773644-46/1/2021 11:25:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Reservation for namespace identified by URL prefix https://+:5986/wsman/ was successfully added.15007016384400360287970189639682689Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System4512n-h2-773644-46/1/2021 11:25:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Reservation for namespace identified by URL prefix https://+:5986/wsman/ was successfully deleted.15008016384400360287970189639682688Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System4512n-h2-773644-46/1/2021 11:25:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the stopped state.7036016384400-91873432398358118402687Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:25:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639682686Virtual Disk ServiceSystemn-h2-773644-46/1/2021 11:25:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the running state.7036016384400-91873432398358118402685Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:25:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639682684Virtual Disk ServiceSystemn-h2-773644-46/1/2021 11:25:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\Admin SID (S-1-5-21-1249627717-4114815304-3679761778-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402683Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521820n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10016/1/2021 11:25:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TBS device identifier has been generated.12820400-92233720368547758082682Microsoft-Windows-TPM-WMI7d5387b0-cbe0-11da-a94d-0800200c9a66System22244088n-h2-773644-4S-1-5-186/1/2021 11:25:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->51.105.208.173:123).350400-92233720368547758082681Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14361524n-h2-773644-4S-1-5-196/1/2021 11:25:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrustedInstaller service entered the running state.7036016384400-91873432398358118402680Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:24:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\cloudbase-init SID (S-1-5-21-1249627717-4114815304-3679761778-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402679Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521824n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10006/1/2021 11:24:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118402678Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:24:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 1 Group Policy objects were detected and applied.15020401-92233720368547758082677Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System5562604n-h2-773644-4S-1-5-186/1/2021 11:24:57 AM0c54b5e6-f721-4dfa-93e9-13354449cf7fsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The swprv service entered the running state.7036016384400-91873432398358118402676Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:24:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:10.222.0.15 has been brought up.42000400-92233720368547758082675Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System5562880n-h2-773644-4S-1-5-186/1/2021 11:24:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:192.168.0.64 has been brought up.42000400-92233720368547758082674Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System5562880n-h2-773644-4S-1-5-186/1/2021 11:24:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the stopped state.7036016384400-91873432398358118402673Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:24:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the running state.7036016384400-91873432398358118402672Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:24:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wuauserv service entered the running state.7036016384400-91873432398358118402671Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796868n-h2-773644-46/1/2021 11:24:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H2-773644-4\cloudbase-init SID (S-1-5-21-1249627717-4114815304-3679761778-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402670Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9521000n-h2-773644-4S-1-5-21-1249627717-4114815304-3679761778-10006/1/2021 11:24:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LicenseManager service entered the running state.7036016384400-91873432398358118402669Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:24:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
This event triggers the TBS device identifier generation.12810400-92233720368547758082668Microsoft-Windows-TPM-WMI7d5387b0-cbe0-11da-a94d-0800200c9a66System5562936n-h2-773644-4S-1-5-186/1/2021 11:24:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SessionEnv service entered the running state.7036016384400-91873432398358118402667Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:24:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the running state.7036016384400-91873432398358118402666Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:24:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UmRdpService service entered the running state.7036016384400-91873432398358118402665Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:24:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A new self signed certificate to be used for RD Session Host Server authentication on SSL connections was generated. The name on this certificate is n-h2-773644-4. The SHA1 hash of the certificate is in the event data.1056049152400360287970189639682664Microsoft-Windows-TerminalServices-RemoteConnectionManagerc76baa63-ae81-421c-b425-340b4b24157fSystem00n-h2-773644-46/1/2021 11:24:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TermService service entered the running state.7036016384400-91873432398358118402663Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:24:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the cloudbase-init service was changed from demand start to auto start.7040016384400-91873432398358118402662Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-4S-1-5-186/1/2021 11:24:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmcompute service entered the running state.7036016384400-91873432398358118402661Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:24:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The KeyIso service entered the running state.7036016384400-91873432398358118402660Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:24:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ClipSVC service entered the running state.7036016384400-91873432398358118402659Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442658Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem42176n-h2-773644-4S-1-5-186/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DmEnrollmentSvc service entered the stopped state.7036016384400-91873432398358118402657Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961648n-h2-773644-46/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981442656Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4228n-h2-773644-4S-1-5-186/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DmEnrollmentSvc service entered the running state.7036016384400-91873432398358118402655Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961648n-h2-773644-46/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wlidsvc service entered the running state.7036016384400-91873432398358118402654Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961648n-h2-773644-46/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118402653Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961648n-h2-773644-46/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the running state.7036016384400-91873432398358118402652Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118402651Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118402650Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118402649Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796800n-h2-773644-46/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118402648Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961648n-h2-773644-46/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118402647Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h2-773644-46/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118402646Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->51.105.208.173:123).370400-92233720368547758082645Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14361524n-h2-773644-4S-1-5-196/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118402644Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118402643Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118402642Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118402641Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118402640Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639682639Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00n-h2-773644-46/1/2021 11:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118402638Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118402637Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402636Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118402635Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118402634Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961624n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118402633Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961648n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118402632Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961648n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118402631Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961648n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118402630Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118402629Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h2-773644-46/1/2021 11:24:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118402628Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796884n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118402627Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118402626Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961644n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402625Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961644n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402624Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961652n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402623Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961644n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402622Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961644n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402621Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961644n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118402620Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961644n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402619Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961624n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402618Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961624n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402617Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961660n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442616Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4508n-h2-773644-4S-1-5-186/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402615Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442614Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4508n-h2-773644-4S-1-5-186/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442613Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4508n-h2-773644-4S-1-5-186/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcbService service entered the running state.7036016384400-91873432398358118402612Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402611Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppReadiness service entered the running state.7036016384400-91873432398358118402610Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961624n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?06?-?01T11:24:46.072000000Z from ?2021?-?06?-?01T11:24:46.323791700Z. Change Reason: An application or system component changed the time.11450-92233720368547757922609Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14281920n-h2-773644-4S-1-5-196/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402608Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961624n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402607Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402606Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402605Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402604Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961636n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DsmSvc service entered the running state.7036016384400-91873432398358118402603Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961668n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the running state.7036016384400-91873432398358118402602Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961668n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118402601Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961668n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402600Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402599Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961680n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402598Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961624n-h2-773644-46/1/2021 11:24:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402597Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:24:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522596Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System14281572n-h2-773644-4S-1-5-196/1/2021 11:24:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522595Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem14281544n-h2-773644-4S-1-5-196/1/2021 11:24:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402594Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System7961472n-h2-773644-46/1/2021 11:24:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402593Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h2-773644-46/1/2021 11:24:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118402592Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h2-773644-46/1/2021 11:24:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118402591Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully logged OS information2004044000023059837467020492802590Microsoft-Windows-Setup75ebc33e-997f-49cf-b49f-ecc50184b75dSystem11761180n-h2-773644-4S-1-5-186/1/2021 11:24:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoOS informationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118402589Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppXSvc service entered the running state.7036016384400-91873432398358118402588Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118402587Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushservice service entered the running state.7036016384400-91873432398358118402586Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402585Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118402584Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796888n-h2-773644-46/1/2021 11:24:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DeviceInstall service entered the running state.7036016384400-91873432398358118402583Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402582Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402581Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402580Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402579Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402578Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402577Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402576Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402575Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System796880n-h2-773644-46/1/2021 11:24:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082574Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem812816n-h2-773644-4S-1-5-186/1/2021 11:24:32 AMada05baa-56d8-0005-b05b-a0add856d701systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042573Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem684688n-h2-773644-4S-1-5-186/1/2021 11:24:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082572Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h2-773644-4S-1-5-186/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082571Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384n-h2-773644-4S-1-5-186/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082570Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h2-773644-4S-1-5-186/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082569Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384n-h2-773644-4S-1-5-186/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082568Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h2-773644-46/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082567Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188n-h2-773644-4S-1-5-186/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082566Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188n-h2-773644-4S-1-5-186/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082565Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188n-h2-773644-4S-1-5-186/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082564Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h2-773644-46/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082563Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188n-h2-773644-4S-1-5-186/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082562Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188n-h2-773644-4S-1-5-186/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082561Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188n-h2-773644-4S-1-5-186/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082560Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h2-773644-4S-1-5-186/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082559Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384n-h2-773644-4S-1-5-186/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802558Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48n-h2-773644-46/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802557Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4228n-h2-773644-4S-1-5-186/1/2021 11:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442556Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h2-773644-4S-1-5-186/1/2021 11:24:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682555VfpExtSystemn-h2-773644-46/1/2021 11:24:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442554Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h2-773644-4S-1-5-186/1/2021 11:24:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume C: (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062553Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4228n-h2-773644-4S-1-5-186/1/2021 11:24:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442552Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h2-773644-4S-1-5-186/1/2021 11:24:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442551Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h2-773644-4S-1-5-186/1/2021 11:24:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442550Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48n-h2-773644-4S-1-5-186/1/2021 11:24:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442549Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h2-773644-4S-1-5-186/1/2021 11:24:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442548Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h2-773644-4S-1-5-186/1/2021 11:24:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442547Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h2-773644-4S-1-5-186/1/2021 11:24:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082546Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h2-773644-4S-1-5-186/1/2021 11:24:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082545Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h2-773644-4S-1-5-186/1/2021 11:24:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082544Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h2-773644-4S-1-5-186/1/2021 11:24:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082543Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h2-773644-4S-1-5-186/1/2021 11:24:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082542Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h2-773644-4S-1-5-186/1/2021 11:24:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082541Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h2-773644-4S-1-5-186/1/2021 11:24:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2021?-?06?-?01T11:24:25.497383100Z.120410-92233720368547756802540Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48n-h2-773644-4S-1-5-186/1/2021 11:24:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2021?-?06?-?01T11:24:18.513380200Z.130420-92233720368547756802539Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4376n-h2-773644-46/1/2021 11:24:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162538Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System692696n-h2-773644-46/1/2021 11:24:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Application popup: Windows - Bad Image : Exception Processing Message 0xc000007b Parameters 0x7ff8d9521d28 0xffffffffc0000428 0x7ff8d9521d28 0x7ff8d9521d28260400-92233720368547758082537Application Popup47bfa2b7-bd54-4fac-b70b-29021084ca8fSystem6001304n-h2-773644-4S-1-5-186/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402536Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284n-h2-773644-46/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402535Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284n-h2-773644-46/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402534Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284n-h2-773644-46/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system uptime is 20 seconds.60133276840360287970189639682533EventLogSystemn-h2-773644-46/1/2021 11:24:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682532EventLogSystemn-h2-773644-46/1/2021 11:24:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682531EventLogSystemn-h2-773644-46/1/2021 11:24:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetBIOS name and DNS host name of this machine have been changed from WIN-G6S8R62FBSN to N-H2-773644-4.60113276840360287970189639682530EventLogSystemn-h2-773644-46/1/2021 11:24:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402529Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402528Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402527Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402526Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402525Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402524Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402523Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402522Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402521Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522520Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem12961536WIN-5T344G8GM1HS-1-5-196/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522519Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System12961652WIN-5T344G8GM1HS-1-5-196/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402518Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402517Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402516Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402515Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?06?-?01T11:24:17.315000000Z from ?2021?-?06?-?01T11:24:17.322373200Z. Change Reason: An application or system component changed the time.11450-92233720368547757922514Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14762256WIN-5T344G8GM1HS-1-5-196/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402513Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Install Service service entered the stopped state.7036016384400-91873432398358118402512Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402511Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041252WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HV Host Service service entered the stopped state.7036016384400-91873432398358118402510Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402509Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402508Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041380WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682507EventLogSystemWIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is not listening for WS-Management requests. User Action If you did not intentionally stop the service, use the following command to see the WinRM configuration: winrm enumerate winrm/config/listener1014907300360287970189639682506Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00WIN-5T344G8GM1H6/1/2021 11:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402505Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041380WIN-5T344G8GM1H6/1/2021 11:24:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402504Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041380WIN-5T344G8GM1H6/1/2021 11:24:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402503Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041380WIN-5T344G8GM1H6/1/2021 11:24:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402502Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041256WIN-5T344G8GM1H6/1/2021 11:24:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\system32\winlogon.exe (WIN-5T344G8GM1H) has initiated the restart of computer WIN-G6S8R62FBSN on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Upgrade (Planned) Reason Code: 0x80020003 Shutdown Type: restart Comment: 1074032768400-91873432398358118402501User32b0aa8734-56f7-41cc-b2f4-de228e98b946System600616WIN-5T344G8GM1HS-1-5-186/1/2021 11:24:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtual Disk service entered the stopped state.7036016384400-91873432398358118402500Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041256WIN-5T344G8GM1H6/1/2021 11:24:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639682499Virtual Disk ServiceSystemWIN-5T344G8GM1H6/1/2021 11:24:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtual Disk service entered the running state.7036016384400-91873432398358118402498Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H6/1/2021 11:24:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639682497Virtual Disk ServiceSystemWIN-5T344G8GM1H6/1/2021 11:24:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Network Inspection Service service entered the stopped state.7036016384400-91873432398358118402496Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H6/1/2021 11:24:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Network Inspection Service service entered the running state.7036016384400-91873432398358118402495Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H6/1/2021 11:24:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Error Reporting Service service entered the running state.7036016384400-91873432398358118402494Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041256WIN-5T344G8GM1H6/1/2021 11:24:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402493Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804876WIN-5T344G8GM1H6/1/2021 11:23:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \??\C:\windows\System32\SMI\Store\Machine\SCHEMA.DAT was reorganized with a starting size of 12853248 bytes and an ending size of 11681792 bytes.150400-92233720368547758082492Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11761180WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \??\C:\windows\System32\config\COMPONENTS was reorganized with a starting size of 71872512 bytes and an ending size of 56864768 bytes.150400-92233720368547758082491Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11761180WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->51.105.208.173:123).350400-92233720368547758082490Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14761948WIN-5T344G8GM1HS-1-5-196/1/2021 11:23:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082489Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.MiracastView_6.3.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082488Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082487Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameCallableUI_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082486Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.14393.1715_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082485Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082484Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082483Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.14393.1066_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082482Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.AssignedAccessLockApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082481Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082480Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.LockApp_10.0.14393.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082479Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BioEnrollment_10.0.14393.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082478Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AccountsControl_10.0.14393.1715_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082477Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082476Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem10122936WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\AppCompat\Programs\Amcache.hve was cleared updating 629 keys and creating 196 modified pages.160400-92233720368547758082475Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem21562460WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver msports.inf_amd64_280f71b0b084cc3b\msports.inf for Device Instance ID ACPI\PNP0501\1 with the following status: 0x0.200010470050-92233720368547758082474Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25442584WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serenum for Device Instance ID ACPI\PNP0501\1 with the following status: 0.200030470050-92233720368547758082473Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25442584WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serial for Device Instance ID ACPI\PNP0501\1 with the following status: 0.200030470050-92233720368547758082472Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25442584WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver wvmbusvideo.inf_amd64_1f06cc897822eef5\wvmbusvideo.inf for Device Instance ID VMBUS\{DA0A7802-E377-4AAC-8E77-0558EB1073F8}\{5620E0C7-8062-4DCE-AEB7-520C7EF76171} with the following status: 0x0.200010470050-92233720368547758082471Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25362580WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service HyperVideo for Device Instance ID VMBUS\{DA0A7802-E377-4AAC-8E77-0558EB1073F8}\{5620E0C7-8062-4DCE-AEB7-520C7EF76171} with the following status: 0.200030470050-92233720368547758082470Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25362580WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver msports.inf_amd64_280f71b0b084cc3b\msports.inf for Device Instance ID ACPI\PNP0501\2 with the following status: 0x0.200010470050-92233720368547758082469Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25922612WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Host Compute Service service entered the running state.7036016384400-91873432398358118402468Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H6/1/2021 11:23:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serenum for Device Instance ID ACPI\PNP0501\2 with the following status: 0.200030470050-92233720368547758082467Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25922612WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the running state.7036016384400-91873432398358118402466Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041380WIN-5T344G8GM1H6/1/2021 11:23:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serial for Device Instance ID ACPI\PNP0501\2 with the following status: 0.200030470050-92233720368547758082465Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25922612WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->51.105.208.173:123).370400-92233720368547758082464Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14762040WIN-5T344G8GM1HS-1-5-196/1/2021 11:23:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442463Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4564WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981442462Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4376WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118402461Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:23:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the stopped state.7036016384400-91873432398358118402460Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:23:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118402459Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041400WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118402458Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118402457Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118402456Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804808WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118402455Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118402454Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118402453Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118402452Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041416WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118402451Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041416WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service terminated with the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.7023049152200-91873432398358118402450Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the stopped state.7036016384400-91873432398358118402449Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118402448Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041416WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118402447Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041256WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118402446Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041404WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118402445Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041252WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118402444Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041396WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639682443Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118402442Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8042076WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118402441Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118402440Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118402439Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402438Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H6/1/2021 11:23:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118402437Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402436Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118402435Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118402434Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118402433Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118402432Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118402431Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402430Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041376WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118402429Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service terminated with the following error: The device is not ready.7023049152200-91873432398358118402428Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the stopped state.7036016384400-91873432398358118402427Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402426Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041396WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402425Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041396WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402424Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041396WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118402423Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041396WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402422Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041396WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118402421Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041396WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402420Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522419Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System12961652WIN-5T344G8GM1HS-1-5-196/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522418Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem12961536WIN-5T344G8GM1HS-1-5-196/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402417Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402416Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402415Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402414Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041396WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402413Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804892WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402412Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041396WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402411Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041396WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402410Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041268WIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442409Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4136WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442408Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4136WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442407Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4136WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?06?-?01T11:23:23.144000000Z from ?2021?-?06?-?01T11:23:22.325578600Z. Change Reason: An application or system component changed the time.11450-92233720368547757922406Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem12961424WIN-5T344G8GM1HS-1-5-196/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402405Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804888WIN-5T344G8GM1H6/1/2021 11:23:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402404Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041272WIN-5T344G8GM1H6/1/2021 11:23:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402403Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041416WIN-5T344G8GM1H6/1/2021 11:23:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402402Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H6/1/2021 11:23:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402401Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041332WIN-5T344G8GM1H6/1/2021 11:23:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DsmSvc service entered the running state.7036016384400-91873432398358118402400Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8041284WIN-5T344G8GM1H6/1/2021 11:23:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 10 keys and creating 2 modified pages.160400-92233720368547758082399Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem912944WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402398Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H6/1/2021 11:23:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118402397Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H6/1/2021 11:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppXSvc service entered the running state.7036016384400-91873432398358118402396Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H6/1/2021 11:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082395Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem432WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082394Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4588WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082393Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00WIN-5T344G8GM1H6/1/2021 11:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082392Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4588WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082391Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4564WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082390Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4588WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082389Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00WIN-5T344G8GM1H6/1/2021 11:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082388Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4588WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118402387Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H6/1/2021 11:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushservice service entered the running state.7036016384400-91873432398358118402386Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H6/1/2021 11:23:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402385Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H6/1/2021 11:23:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118402384Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H6/1/2021 11:23:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DeviceInstall service entered the running state.7036016384400-91873432398358118402383Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H6/1/2021 11:23:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402382Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H6/1/2021 11:23:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402381Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804884WIN-5T344G8GM1H6/1/2021 11:23:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402380Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896WIN-5T344G8GM1H6/1/2021 11:23:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402379Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896WIN-5T344G8GM1H6/1/2021 11:23:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402378Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896WIN-5T344G8GM1H6/1/2021 11:23:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402377Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896WIN-5T344G8GM1H6/1/2021 11:23:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402376Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896WIN-5T344G8GM1H6/1/2021 11:23:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402375Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System804896WIN-5T344G8GM1H6/1/2021 11:23:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082374Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem820824WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:12 AM7489a3f4-56d8-0005-f8a3-8974d856d701systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042373Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem692696WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Default\NTUSER.DAT was cleared updating 126 keys and creating 18 modified pages.160400-92233720368547758082372Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 628 keys and creating 85 modified pages.160400-92233720368547758082371Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Administrator\NTUSER.DAT was cleared updating 1935 keys and creating 116 modified pages.160400-92233720368547758082370Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 128 keys and creating 20 modified pages.160400-92233720368547758082369Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 137 keys and creating 21 modified pages.160400-92233720368547758082368Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-186/1/2021 11:23:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 80 keys and creating 7 modified pages.160400-92233720368547758082367Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4548WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 87 keys and creating 5 modified pages.160400-92233720368547758082366Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4532WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 229 keys and creating 27 modified pages.160400-92233720368547758082365Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4544WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 78917632 bytes and an ending size of 74686464 bytes.150400-92233720368547758082364Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4536WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 82 keys and creating 1 modified pages.160400-92233720368547758082363Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem484488WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 5177344 bytes and an ending size of 5169152 bytes.150400-92233720368547758082362Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem432WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082361Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082360Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082359Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082358Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082357Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082356Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802355Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48WIN-5T344G8GM1H6/1/2021 11:22:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802354Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4376WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442353Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682352VfpExtSystemWIN-5T344G8GM1H6/1/2021 11:22:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442351Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume \\?\Volume{be07386b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062350Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4188WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442349Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442348Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442347Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442346Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442345Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442344Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082343Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082342Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082341Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082340Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082339Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082338Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2021?-?06?-?01T11:22:49.483852400Z.120410-92233720368547756802337Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48WIN-5T344G8GM1HS-1-5-186/1/2021 11:22:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2018?-?01?-?19T09:48:14.082208700Z.130420-92233720368547756802336Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem42896WIN-5T344G8GM1H1/19/2018 9:48:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162335Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System520524WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service entered the stopped state.7036016384400-91873432398358118402334Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402333Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402332Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402331Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402330Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402329Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402328Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402327Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402326Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682325EventLogSystemWIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682324EventLogSystemWIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetBIOS name and DNS host name of this machine have been changed from WIN-5T344G8GM1H to WIN-G6S8R62FBSN.60113276840360287970189639682323EventLogSystemWIN-5T344G8GM1H6/1/2021 11:23:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service entered the stopped state.7036016384400-91873432398358118402322Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402321Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the stopped state.7036016384400-91873432398358118402320Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402319Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services service entered the stopped state.7036016384400-91873432398358118402318Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Software Shadow Copy Provider service entered the stopped state.7036016384400-91873432398358118402317Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402316Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402315Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402314Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services UserMode Port Redirector service entered the stopped state.7036016384400-91873432398358118402313Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561100WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402312Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656416WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402311Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656416WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2018?-?01?-?19T09:48:13.152000000Z from ?2018?-?01?-?19T09:48:13.164762500Z. Change Reason: An application or system component changed the time.11450-92233720368547757922310Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem12442300WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Credential Manager service entered the stopped state.7036016384400-91873432398358118402309Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561080WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402308Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6562116WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402307Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561048WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522306Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem4361300WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522305Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System4361360WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402304Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402303Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402302Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402301Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402300Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402299Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
User Logoff Notification for Customer Experience Improvement Program7002041102023058781935857827842298Microsoft-Windows-Winlogondbe9b383-7cf3-4331-91cc-a3cb16a3b538System584916WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682297EventLogSystemWIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CDPUserSvc_24762 service entered the stopped state.7036016384400-91873432398358118402296Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Sync Host_24762 service entered the stopped state.7036016384400-91873432398358118402295Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402294Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem820972WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the stopped state.7036016384400-91873432398358118402293Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Configuration service entered the stopped state.7036016384400-91873432398358118402292Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\System32\Sysprep\Sysprep.exe (WIN-5T344G8GM1H) has initiated the shutdown of computer WIN-5T344G8GM1H on behalf of user WIN-5T344G8GM1H\Administrator for the following reason: No title for this reason could be found Reason Code: 0x40002 Shutdown Type: shutdown Comment: 1074032768400-91873432398358118402291User32b0aa8734-56f7-41cc-b2f4-de228e98b946System448464WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Process C:\Windows\System32\Sysprep\sysprep.exe (process ID:4012) reset policy scheme from {381B4222-F694-41F0-9685-FF5BB260DF2E} to {381B4222-F694-41F0-9685-FF5BB260DF2E}120410046116860184273879042290Microsoft-Windows-UserModePowerServicece8dee0b-d539-4000-b0f8-77bed049c590System764316WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the running state.7036016384400-91873432398358118402289Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402288Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402287Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)1340300-92233720368547758082286Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem12441320WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the running state.7036016384400-91873432398358118402285Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402284Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402283Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TCP/IP NetBIOS Helper service entered the stopped state.7036016384400-91873432398358118402282Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TCP/IP NetBIOS Helper service was successfully sent a stop control. The reason specified was: 0x40030011 [Operating System: Network Connectivity (Planned)] Comment: None7042016384400-91873432398358118402281Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport Teredo Tunneling Pseudo-Interface, {8A97E6D0-A2AF-48AE-8BC2-FFC865CC4DF6}, had event Network Interface deleted while PNP Device still exists. Note that this event is provided for informational purpose and might not be an error always (Eg: In case of vSwitch which was recently un-installed or a LBFO team was removed)10317022023058430092137103582280Microsoft-Windows-NDIScdead503-17f5-4a3e-b7ae-df8cc2902eb9System9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AM8a97e6d0-a2af-48ae-8bc2-ffc865cc4df6systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoPnPSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' is halting60410030-92233720368547758082279Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem41984WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport Microsoft Hyper-V Network Adapter #2, {518CDFA4-5492-4D9E-BEAA-908825A4A289}, had event Network Interface deleted while PNP Device still exists. Note that this event is provided for informational purpose and might not be an error always (Eg: In case of vSwitch which was recently un-installed or a LBFO team was removed)10317022023058430092137103582278Microsoft-Windows-NDIScdead503-17f5-4a3e-b7ae-df8cc2902eb9System9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AM518cdfa4-5492-4d9e-beaa-908825a4a289systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoPnPSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)1340300-92233720368547758082277Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem12441800WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.{518CDFA4-5492-4D9E-BEAA-908825A4A289} is no longer active.42010400-92233720368547758082276Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System9761376WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082275Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118402274Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft-Windows-Kernel-PnP/Configuration log file was cleared.104041040-92233720368547758082273Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the VIA StorX Storage RAID Controller Windows Driver service was changed from demand start to boot start.7040016384400-91873432398358118402272Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the vsmraid service was changed from demand start to boot start.7040016384400-91873432398358118402271Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Universal Flash Storage (UFS) Driver service was changed from demand start to boot start.7040016384400-91873432398358118402270Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Standard NVM Express Driver service was changed from demand start to boot start.7040016384400-91873432398358118402269Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the stexstor service was changed from demand start to boot start.7040016384400-91873432398358118402268Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SiSRaid4 service was changed from demand start to boot start.7040016384400-91873432398358118402267Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SiSRaid2 service was changed from demand start to boot start.7040016384400-91873432398358118402266Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Storage Class Memory Bus Driver service was changed from demand start to boot start.7040016384400-91873432398358118402265Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SBP-2 Transport/Protocol Bus Driver service was changed from demand start to boot start.7040016384400-91873432398358118402264Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic [FCoE] STOR Miniport Inbox Driver (wx64) service was changed from demand start to boot start.7040016384400-91873432398358118402263Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic iSCSI Miniport Inbox Driver service was changed from demand start to boot start.7040016384400-91873432398358118402262Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Fibre Channel STOR Miniport Inbox Driver (wx64) service was changed from demand start to boot start.7040016384400-91873432398358118402261Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the percsas3i service was changed from demand start to boot start.7040016384400-91873432398358118402260Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the percsas2i service was changed from demand start to boot start.7040016384400-91873432398358118402259Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the pcmcia service was changed from demand start to boot start.7040016384400-91873432398358118402258Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nvraid service was changed from demand start to boot start.7040016384400-91873432398358118402257Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nvstor service was changed from demand start to boot start.7040016384400-91873432398358118402256Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic 10 Gigabit Ethernet Adapter VBD service was changed from demand start to boot start.7040016384400-91873432398358118402255Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Network Adapter VBD service was changed from demand start to boot start.7040016384400-91873432398358118402254Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the mvumis service was changed from demand start to boot start.7040016384400-91873432398358118402253Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Standard SATA AHCI Driver service was changed from demand start to boot start.7040016384400-91873432398358118402252Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the pciide service was changed from demand start to boot start.7040016384400-91873432398358118402251Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasr service was changed from demand start to boot start.7040016384400-91873432398358118402250Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasas2i service was changed from demand start to boot start.7040016384400-91873432398358118402249Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasas service was changed from demand start to boot start.7040016384400-91873432398358118402248Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the isapnp service was changed from demand start to boot start.7040016384400-91873432398358118402247Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SSS service was changed from demand start to boot start.7040016384400-91873432398358118402246Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS3i service was changed from demand start to boot start.7040016384400-91873432398358118402245Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS2i service was changed from demand start to boot start.7040016384400-91873432398358118402244Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS service was changed from demand start to boot start.7040016384400-91873432398358118402243Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Intel RAID Controller Windows 7 service was changed from demand start to boot start.7040016384400-91873432398358118402242Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Intel(R) SATA RAID Controller Windows service was changed from demand start to boot start.7040016384400-91873432398358118402241Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the HpSAMD service was changed from demand start to boot start.7040016384400-91873432398358118402240Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the elxstor service was changed from demand start to boot start.7040016384400-91873432398358118402239Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the elxfcoe service was changed from demand start to boot start.7040016384400-91873432398358118402238Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols service was changed from demand start to boot start.7040016384400-91873432398358118402237Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the cht4iscsi service was changed from demand start to boot start.7040016384400-91873432398358118402236Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Offload iSCSI Driver service was changed from demand start to boot start.7040016384400-91873432398358118402235Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic FCoE Offload driver service was changed from demand start to boot start.7040016384400-91873432398358118402234Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the bfadfcoei service was changed from demand start to boot start.7040016384400-91873432398358118402233Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the bfadi service was changed from demand start to boot start.7040016384400-91873432398358118402232Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Adaptec SAS/SATA-II RAID Storport's Miniport Driver service was changed from demand start to boot start.7040016384400-91873432398358118402231Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdsbs service was changed from demand start to boot start.7040016384400-91873432398358118402230Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdxata service was changed from demand start to boot start.7040016384400-91873432398358118402229Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdsata service was changed from demand start to boot start.7040016384400-91873432398358118402228Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the ADP80XX service was changed from demand start to boot start.7040016384400-91873432398358118402227Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the 3ware service was changed from demand start to boot start.7040016384400-91873432398358118402226Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402225Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402224Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the stopped state.7036016384400-91873432398358118402223Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the stopped state.7036016384400-91873432398358118402222Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the running state.7036016384400-91873432398358118402221Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Setup log file was cleared.104041040-92233720368547758082220Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Application log file was cleared.104041040-92233720368547758082219Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The System log file was cleared.104041040-92233720368547758082218Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]