MessageIdVersionQualifiersLevelTaskOpcodeKeywordsRecordIdProviderNameProviderIdLogNameProcessIdThreadIdMachineNameUserIdTimeCreatedActivityIdRelatedActivityIdContainerLogMatchedQueryIdsBookmarkLevelDisplayNameOpcodeDisplayNameTaskDisplayNameKeywordsDisplayNamesProperties
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403674Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 2:43:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403673Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 2:41:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403672Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 2:41:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EDF2B6A8-50D0-4FE2-9FC8-AD5714C6DED8--C01EF385-707E-4D1A-A0D8-4554270CA932 (Friendly Name: 1b08d3af-df7c-4906-994d-cf5b7d0fe416).2330400-92233720368547758083671Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43283372n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3992106664-1340231888-1471006879-363847835610/19/2021 2:40:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EDF2B6A8-50D0-4FE2-9FC8-AD5714C6DED8--C01EF385-707E-4D1A-A0D8-4554270CA932 successfully disconnected from port .2340400-92233720368547758083670Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43283372n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3992106664-1340231888-1471006879-363847835610/19/2021 2:40:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EDF2B6A8-50D0-4FE2-9FC8-AD5714C6DED8--C01EF385-707E-4D1A-A0D8-4554270CA932 (Friendly Name: 1b08d3af-df7c-4906-994d-cf5b7d0fe416) successfully connected to port 3D76DC99-47B8-4E92-A2FC-522F4573A329 (Friendly Name: 1b08d3af-df7c-4906-994d-cf5b7d0fe416) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083669Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43284512n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3992106664-1340231888-1471006879-363847835610/19/2021 2:38:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EDF2B6A8-50D0-4FE2-9FC8-AD5714C6DED8--C01EF385-707E-4D1A-A0D8-4554270CA932 (Friendly Name: ).2330400-92233720368547758083668Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43284512n-h1-789963-20.cbci-789963-20.local10/19/2021 2:38:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403667Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 2:38:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403666Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 2:37:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403665Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 2:36:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 75EC7728-2806-48EB-A5AF-557BECBCD829--380E3FEA-8B50-474F-8B4A-487581F5834C (Friendly Name: 6d8f1594-3235-4707-95b6-9e0468027f8f).2330400-92233720368547758083664Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27923436n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1978431272-1223370758-2069213093-70206999610/19/2021 2:30:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 75EC7728-2806-48EB-A5AF-557BECBCD829--380E3FEA-8B50-474F-8B4A-487581F5834C successfully disconnected from port .2340400-92233720368547758083663Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27923436n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1978431272-1223370758-2069213093-70206999610/19/2021 2:30:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403662Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 2:30:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the stopped state.7036016384400-91873432398358118403661Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 2:29:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-13-5F-0F has moved from port D29B6748-0E63-46D0-9911-412A9C1D9747 (Friendly Name: br-data_External) to port CA54F940-3AB5-45FE-A4DB-D3A2AF9DF625 (Friendly Name: 6d8f1594-3235-4707-95b6-9e0468027f8f).250410180-92233720368547758083660Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem00n-h1-789963-20.cbci-789963-20.local10/19/2021 2:29:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 75EC7728-2806-48EB-A5AF-557BECBCD829--380E3FEA-8B50-474F-8B4A-487581F5834C (Friendly Name: 6d8f1594-3235-4707-95b6-9e0468027f8f) successfully connected to port CA54F940-3AB5-45FE-A4DB-D3A2AF9DF625 (Friendly Name: 6d8f1594-3235-4707-95b6-9e0468027f8f) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083659Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27924872n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1978431272-1223370758-2069213093-70206999610/19/2021 2:28:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 75EC7728-2806-48EB-A5AF-557BECBCD829--380E3FEA-8B50-474F-8B4A-487581F5834C (Friendly Name: ).2330400-92233720368547758083658Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27924872n-h1-789963-20.cbci-789963-20.local10/19/2021 2:28:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403657Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 2:28:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403656Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 2:26:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1D735F62-14B6-480A-B28C-BC3E56F99436--12BE7991-4963-44EA-A7A0-EB7CAFE42242 (Friendly Name: 1ed84948-0782-42fe-bfeb-ed9a7fdf1bf6).2330400-92233720368547758083655Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46205000n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-494100322-1208620214-1052544178-91573282210/19/2021 2:25:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1D735F62-14B6-480A-B28C-BC3E56F99436--12BE7991-4963-44EA-A7A0-EB7CAFE42242 successfully disconnected from port .2340400-92233720368547758083654Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46205000n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-494100322-1208620214-1052544178-91573282210/19/2021 2:25:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1D735F62-14B6-480A-B28C-BC3E56F99436--12BE7991-4963-44EA-A7A0-EB7CAFE42242 (Friendly Name: 1ed84948-0782-42fe-bfeb-ed9a7fdf1bf6) successfully connected to port 756006C0-E574-4BD8-AE6B-3A9F06CECDEF (Friendly Name: 1ed84948-0782-42fe-bfeb-ed9a7fdf1bf6) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083653Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46204784n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-494100322-1208620214-1052544178-91573282210/19/2021 2:25:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1D735F62-14B6-480A-B28C-BC3E56F99436--12BE7991-4963-44EA-A7A0-EB7CAFE42242 (Friendly Name: ).2330400-92233720368547758083652Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46204784n-h1-789963-20.cbci-789963-20.local10/19/2021 2:25:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1D735F62-14B6-480A-B28C-BC3E56F99436--12BE7991-4963-44EA-A7A0-EB7CAFE42242 (Friendly Name: 1ed84948-0782-42fe-bfeb-ed9a7fdf1bf6).2330400-92233720368547758083651Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23601272n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-494100322-1208620214-1052544178-91573282210/19/2021 2:25:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1D735F62-14B6-480A-B28C-BC3E56F99436--12BE7991-4963-44EA-A7A0-EB7CAFE42242 successfully disconnected from port .2340400-92233720368547758083650Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23601272n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-494100322-1208620214-1052544178-91573282210/19/2021 2:25:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1D735F62-14B6-480A-B28C-BC3E56F99436--12BE7991-4963-44EA-A7A0-EB7CAFE42242 (Friendly Name: 1ed84948-0782-42fe-bfeb-ed9a7fdf1bf6) successfully connected to port 756006C0-E574-4BD8-AE6B-3A9F06CECDEF (Friendly Name: 1ed84948-0782-42fe-bfeb-ed9a7fdf1bf6) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083649Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23601272n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-494100322-1208620214-1052544178-91573282210/19/2021 2:24:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1D735F62-14B6-480A-B28C-BC3E56F99436--12BE7991-4963-44EA-A7A0-EB7CAFE42242 (Friendly Name: ).2330400-92233720368547758083648Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23601272n-h1-789963-20.cbci-789963-20.local10/19/2021 2:24:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403647Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 2:24:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403646Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 2:23:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 16FC738B-FAA3-4C74-9632-738D5704C6EB--755215D7-EE25-48EB-AB62-F1E851E2936C (Friendly Name: 8e7f479f-5d3a-46e5-b0fb-0539bf3edc13).2330400-92233720368547758083645Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem22603996n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-385643403-1282734755-2373137046-395562299910/19/2021 2:21:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 16FC738B-FAA3-4C74-9632-738D5704C6EB--755215D7-EE25-48EB-AB62-F1E851E2936C successfully disconnected from port .2340400-92233720368547758083644Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem22603996n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-385643403-1282734755-2373137046-395562299910/19/2021 2:21:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 16FC738B-FAA3-4C74-9632-738D5704C6EB--755215D7-EE25-48EB-AB62-F1E851E2936C (Friendly Name: 8e7f479f-5d3a-46e5-b0fb-0539bf3edc13) successfully connected to port 102F7F3E-BC8D-49D6-93EC-B98A82ED4D23 (Friendly Name: 8e7f479f-5d3a-46e5-b0fb-0539bf3edc13) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083643Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem22603268n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-385643403-1282734755-2373137046-395562299910/19/2021 2:20:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 16FC738B-FAA3-4C74-9632-738D5704C6EB--755215D7-EE25-48EB-AB62-F1E851E2936C (Friendly Name: ).2330400-92233720368547758083642Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem22603268n-h1-789963-20.cbci-789963-20.local10/19/2021 2:20:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403641Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 2:20:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E129E28C-0BE7-4A63-ABB9-98592AD538AC--193C8C33-FE85-4653-892E-37C091A55541 (Friendly Name: cb766a7f-c9c6-4582-8917-e9855035a2f3).2330400-92233720368547758083640Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem16364088n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3777618572-1248005095-1503181227-288940573810/19/2021 2:17:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E129E28C-0BE7-4A63-ABB9-98592AD538AC--193C8C33-FE85-4653-892E-37C091A55541 successfully disconnected from port .2340400-92233720368547758083639Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem16364088n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3777618572-1248005095-1503181227-288940573810/19/2021 2:17:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403638Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 2:17:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403637Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004632n-h1-789963-20.cbci-789963-20.local10/19/2021 2:16:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E129E28C-0BE7-4A63-ABB9-98592AD538AC--193C8C33-FE85-4653-892E-37C091A55541 (Friendly Name: cb766a7f-c9c6-4582-8917-e9855035a2f3) successfully connected to port CA486C13-368B-44C7-8954-790F47DA1667 (Friendly Name: cb766a7f-c9c6-4582-8917-e9855035a2f3) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083636Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem16364060n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3777618572-1248005095-1503181227-288940573810/19/2021 2:15:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E129E28C-0BE7-4A63-ABB9-98592AD538AC--193C8C33-FE85-4653-892E-37C091A55541 (Friendly Name: ).2330400-92233720368547758083635Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem16364060n-h1-789963-20.cbci-789963-20.local10/19/2021 2:15:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E129E28C-0BE7-4A63-ABB9-98592AD538AC--193C8C33-FE85-4653-892E-37C091A55541 (Friendly Name: cb766a7f-c9c6-4582-8917-e9855035a2f3).2330400-92233720368547758083634Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27643696n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3777618572-1248005095-1503181227-288940573810/19/2021 2:15:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E129E28C-0BE7-4A63-ABB9-98592AD538AC--193C8C33-FE85-4653-892E-37C091A55541 successfully disconnected from port .2340400-92233720368547758083633Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27643696n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3777618572-1248005095-1503181227-288940573810/19/2021 2:15:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403632Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 2:14:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E129E28C-0BE7-4A63-ABB9-98592AD538AC--193C8C33-FE85-4653-892E-37C091A55541 (Friendly Name: cb766a7f-c9c6-4582-8917-e9855035a2f3) successfully connected to port CA486C13-368B-44C7-8954-790F47DA1667 (Friendly Name: cb766a7f-c9c6-4582-8917-e9855035a2f3) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083631Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27644104n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3777618572-1248005095-1503181227-288940573810/19/2021 2:14:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E129E28C-0BE7-4A63-ABB9-98592AD538AC--193C8C33-FE85-4653-892E-37C091A55541 (Friendly Name: ).2330400-92233720368547758083630Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27644104n-h1-789963-20.cbci-789963-20.local10/19/2021 2:14:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403629Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004380n-h1-789963-20.cbci-789963-20.local10/19/2021 2:14:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403628Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004380n-h1-789963-20.cbci-789963-20.local10/19/2021 2:14:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403627Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004380n-h1-789963-20.cbci-789963-20.local10/19/2021 2:13:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 513AAA39-1D9F-4721-BCD6-F2969AC1BA65--F6F78D34-5781-43AA-BA93-0042FAB87EC3 (Friendly Name: b06a095b-0059-45c2-b65c-e2e4ea8ed65b).2330400-92233720368547758083626Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4196944n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1362799161-1193352607-2532497084-170673807410/19/2021 2:12:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 513AAA39-1D9F-4721-BCD6-F2969AC1BA65--F6F78D34-5781-43AA-BA93-0042FAB87EC3 successfully disconnected from port .2340400-92233720368547758083625Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4196944n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1362799161-1193352607-2532497084-170673807410/19/2021 2:12:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 513AAA39-1D9F-4721-BCD6-F2969AC1BA65--F6F78D34-5781-43AA-BA93-0042FAB87EC3 (Friendly Name: b06a095b-0059-45c2-b65c-e2e4ea8ed65b) successfully connected to port 26A8A53E-AC7E-414E-8DE8-C6A1988F1465 (Friendly Name: b06a095b-0059-45c2-b65c-e2e4ea8ed65b) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083624Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41962588n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1362799161-1193352607-2532497084-170673807410/19/2021 2:11:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 513AAA39-1D9F-4721-BCD6-F2969AC1BA65--F6F78D34-5781-43AA-BA93-0042FAB87EC3 (Friendly Name: ).2330400-92233720368547758083623Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41962588n-h1-789963-20.cbci-789963-20.local10/19/2021 2:11:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D5F78805-1FA5-4E29-B35A-5124B8A4831E--270C5325-0613-414F-A158-B112412CC318 (Friendly Name: c12eb518-9c3d-4978-a75c-f9b22915c82a).2330400-92233720368547758083622Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42564564n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3589769221-1311317925-609311411-51194386410/19/2021 2:11:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D5F78805-1FA5-4E29-B35A-5124B8A4831E--270C5325-0613-414F-A158-B112412CC318 successfully disconnected from port .2340400-92233720368547758083621Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42564564n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3589769221-1311317925-609311411-51194386410/19/2021 2:11:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-D3-3E-C0 has moved from port 40E9B3BD-B0D4-4414-88C8-4C5A4775C20A (Friendly Name: c12eb518-9c3d-4978-a75c-f9b22915c82a) to port 40E9B3BD-B0D4-4414-88C8-4C5A4775C20A (Friendly Name: c12eb518-9c3d-4978-a75c-f9b22915c82a).250410180-92233720368547758083620Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25083452n-h1-789963-20.cbci-789963-20.local10/19/2021 2:11:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D5F78805-1FA5-4E29-B35A-5124B8A4831E--270C5325-0613-414F-A158-B112412CC318 (Friendly Name: c12eb518-9c3d-4978-a75c-f9b22915c82a) successfully connected to port 40E9B3BD-B0D4-4414-88C8-4C5A4775C20A (Friendly Name: c12eb518-9c3d-4978-a75c-f9b22915c82a) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083619Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42564752n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3589769221-1311317925-609311411-51194386410/19/2021 2:11:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403618Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8004380n-h1-789963-20.cbci-789963-20.local10/19/2021 2:11:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D5F78805-1FA5-4E29-B35A-5124B8A4831E--270C5325-0613-414F-A158-B112412CC318 (Friendly Name: ).2330400-92233720368547758083617Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42561696n-h1-789963-20.cbci-789963-20.local10/19/2021 2:11:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3F6A07DE-6E45-4894-B4E7-7EFC64EEFC1B--25CE136E-44D8-40DA-9C06-41077984FD31 (Friendly Name: c12eb518-9c3d-4978-a75c-f9b22915c82a).2330400-92233720368547758083616Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9804368n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1063913438-1217687109-4236175284-46956093210/19/2021 2:10:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3F6A07DE-6E45-4894-B4E7-7EFC64EEFC1B--25CE136E-44D8-40DA-9C06-41077984FD31 successfully disconnected from port .2340400-92233720368547758083615Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9804368n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1063913438-1217687109-4236175284-46956093210/19/2021 2:10:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the running state.7036016384400-91873432398358118403614Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 2:10:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403613Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 2:10:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403612Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 2:09:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3F6A07DE-6E45-4894-B4E7-7EFC64EEFC1B--25CE136E-44D8-40DA-9C06-41077984FD31 (Friendly Name: c12eb518-9c3d-4978-a75c-f9b22915c82a) successfully connected to port 1C4D46B6-8254-4E27-B5CF-D8947E28B4D7 (Friendly Name: c12eb518-9c3d-4978-a75c-f9b22915c82a) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083611Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9804532n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1063913438-1217687109-4236175284-46956093210/19/2021 2:07:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3F6A07DE-6E45-4894-B4E7-7EFC64EEFC1B--25CE136E-44D8-40DA-9C06-41077984FD31 (Friendly Name: ).2330400-92233720368547758083610Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9804532n-h1-789963-20.cbci-789963-20.local10/19/2021 2:07:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic FE6F3176-837D-4C61-96A3-AB40159AFB6F--49100BE9-124F-472E-98DE-844F4AD69072 (Friendly Name: 8f3e3ae9-fed0-464c-b580-5b7e2c8b5024).2330400-92233720368547758083609Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14725000n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4268700022-1281459069-1084990358-187875995710/19/2021 2:07:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FE6F3176-837D-4C61-96A3-AB40159AFB6F--49100BE9-124F-472E-98DE-844F4AD69072 successfully disconnected from port .2340400-92233720368547758083608Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14725000n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4268700022-1281459069-1084990358-187875995710/19/2021 2:07:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-FC-D4-CF has moved from port D29B6748-0E63-46D0-9911-412A9C1D9747 (Friendly Name: br-data_External) to port 994985D8-9E5F-4299-9E78-D5812B0A504F (Friendly Name: 8f3e3ae9-fed0-464c-b580-5b7e2c8b5024).250410180-92233720368547758083607Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25084024n-h1-789963-20.cbci-789963-20.local10/19/2021 2:07:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FE6F3176-837D-4C61-96A3-AB40159AFB6F--49100BE9-124F-472E-98DE-844F4AD69072 (Friendly Name: 8f3e3ae9-fed0-464c-b580-5b7e2c8b5024) successfully connected to port 994985D8-9E5F-4299-9E78-D5812B0A504F (Friendly Name: 8f3e3ae9-fed0-464c-b580-5b7e2c8b5024) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083606Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14723224n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4268700022-1281459069-1084990358-187875995710/19/2021 2:07:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic FE6F3176-837D-4C61-96A3-AB40159AFB6F--49100BE9-124F-472E-98DE-844F4AD69072 (Friendly Name: ).2330400-92233720368547758083605Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14723224n-h1-789963-20.cbci-789963-20.local10/19/2021 2:07:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403604Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 2:07:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403603Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 2:06:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C3BD3A69-3DE6-464E-8381-2815DF0887C9--6DD0B010-D943-4746-AA42-38BE15B50F9F (Friendly Name: 627037fc-8adf-47c9-ad5f-13b847821710).2330400-92233720368547758083602Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13524152n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3283958377-1179532774-354976131-338107004710/19/2021 2:05:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C3BD3A69-3DE6-464E-8381-2815DF0887C9--6DD0B010-D943-4746-AA42-38BE15B50F9F successfully disconnected from port .2340400-92233720368547758083601Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13524152n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3283958377-1179532774-354976131-338107004710/19/2021 2:05:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C3BD3A69-3DE6-464E-8381-2815DF0887C9--6DD0B010-D943-4746-AA42-38BE15B50F9F (Friendly Name: 627037fc-8adf-47c9-ad5f-13b847821710) successfully connected to port 28AEC1C4-6308-44B7-BD61-B2066AAB07D4 (Friendly Name: 627037fc-8adf-47c9-ad5f-13b847821710) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083600Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13524152n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3283958377-1179532774-354976131-338107004710/19/2021 2:05:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C3BD3A69-3DE6-464E-8381-2815DF0887C9--6DD0B010-D943-4746-AA42-38BE15B50F9F (Friendly Name: ).2330400-92233720368547758083599Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem13524152n-h1-789963-20.cbci-789963-20.local10/19/2021 2:05:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403598Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 2:05:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7D6BAFC7-ABAD-4113-BA24-EAD9B7D9D173--626C6ADB-3B93-4022-8327-11D61435D0FF (Friendly Name: 6dd690bd-a562-410b-9ba9-42702d76a244).2330400-92233720368547758083597Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9282736n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2104209351-1091808173-3656000698-194313259910/19/2021 2:02:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7D6BAFC7-ABAD-4113-BA24-EAD9B7D9D173--626C6ADB-3B93-4022-8327-11D61435D0FF successfully disconnected from port .2340400-92233720368547758083596Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9282736n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2104209351-1091808173-3656000698-194313259910/19/2021 2:02:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the stopped state.7036016384400-91873432398358118403595Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 2:02:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403594Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 2:02:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7D6BAFC7-ABAD-4113-BA24-EAD9B7D9D173--626C6ADB-3B93-4022-8327-11D61435D0FF (Friendly Name: 6dd690bd-a562-410b-9ba9-42702d76a244) successfully connected to port 8970DF30-90DB-4DEB-9574-EF65C2108323 (Friendly Name: 6dd690bd-a562-410b-9ba9-42702d76a244) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083593Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9282736n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2104209351-1091808173-3656000698-194313259910/19/2021 2:00:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7D6BAFC7-ABAD-4113-BA24-EAD9B7D9D173--626C6ADB-3B93-4022-8327-11D61435D0FF (Friendly Name: ).2330400-92233720368547758083592Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9282736n-h1-789963-20.cbci-789963-20.local10/19/2021 2:00:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 966BD739-A5FE-459F-B1C6-359FFB7C51A3--799CC159-A7FD-4012-A729-9FE01DAAD84A (Friendly Name: e05da71c-6810-4cec-95cb-23788e335f64).2330400-92233720368547758083591Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27442688n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2523649849-1168090622-2671101617-274002661910/19/2021 1:59:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 966BD739-A5FE-459F-B1C6-359FFB7C51A3--799CC159-A7FD-4012-A729-9FE01DAAD84A successfully disconnected from port .2340400-92233720368547758083590Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27442688n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2523649849-1168090622-2671101617-274002661910/19/2021 1:59:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 966BD739-A5FE-459F-B1C6-359FFB7C51A3--799CC159-A7FD-4012-A729-9FE01DAAD84A (Friendly Name: e05da71c-6810-4cec-95cb-23788e335f64) successfully connected to port DBB22890-740F-40F1-A667-4E95ADE1E20A (Friendly Name: e05da71c-6810-4cec-95cb-23788e335f64) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083589Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27444460n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2523649849-1168090622-2671101617-274002661910/19/2021 1:59:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 966BD739-A5FE-459F-B1C6-359FFB7C51A3--799CC159-A7FD-4012-A729-9FE01DAAD84A (Friendly Name: ).2330400-92233720368547758083588Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27444460n-h1-789963-20.cbci-789963-20.local10/19/2021 1:59:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 75E7B98A-28B5-44B0-8A4D-EE33C54EB9B1--FFBF512D-DB27-469E-819A-CB846F12B19E (Friendly Name: bf4c3aa2-0c7e-4946-acf3-54db8c260440).2330400-92233720368547758083587Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50363340n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1978120586-1152395445-871255434-298171155710/19/2021 1:59:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 75E7B98A-28B5-44B0-8A4D-EE33C54EB9B1--FFBF512D-DB27-469E-819A-CB846F12B19E successfully disconnected from port .2340400-92233720368547758083586Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50363340n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1978120586-1152395445-871255434-298171155710/19/2021 1:59:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-44-75-B0 has moved from port D29B6748-0E63-46D0-9911-412A9C1D9747 (Friendly Name: br-data_External) to port 9EBB03D8-E4DC-4C97-9F97-C40C5C6AA72E (Friendly Name: bf4c3aa2-0c7e-4946-acf3-54db8c260440).250410180-92233720368547758083585Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25084024n-h1-789963-20.cbci-789963-20.local10/19/2021 1:59:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 75E7B98A-28B5-44B0-8A4D-EE33C54EB9B1--FFBF512D-DB27-469E-819A-CB846F12B19E (Friendly Name: bf4c3aa2-0c7e-4946-acf3-54db8c260440) successfully connected to port 9EBB03D8-E4DC-4C97-9F97-C40C5C6AA72E (Friendly Name: bf4c3aa2-0c7e-4946-acf3-54db8c260440) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083584Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50364480n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1978120586-1152395445-871255434-298171155710/19/2021 1:59:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 75E7B98A-28B5-44B0-8A4D-EE33C54EB9B1--FFBF512D-DB27-469E-819A-CB846F12B19E (Friendly Name: ).2330400-92233720368547758083583Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50363340n-h1-789963-20.cbci-789963-20.local10/19/2021 1:59:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server. This event occurs once per boot of the server on the first time a client uses NTLM with this server. NTLM is a weaker authentication mechanism. Please check: Which applications are using NTLM authentication? Are there configuration issues preventing the use of stronger authentication such as Kerberos authentication? If NTLM must be supported, is Extended Protection configured? Details on how to complete these checks can be found at http://go.microsoft.com/fwlink/?LinkId=225699.603800300360287970189639683582LsaSrv199fe037-2b82-40a9-82ac-e1d46c792b99System00n-h1-789963-20.cbci-789963-20.local10/19/2021 1:58:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 9B295F71-AFBB-4578-A8BB-C19D12F361C4--D40EC46F-05FE-42B9-B5D1-CC64D02225A0 (Friendly Name: e226143a-b9d6-4e8d-a35e-c02f82e9960d).2330400-92233720368547758083581Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43201076n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2603179889-1165537211-2646719400-329475355410/19/2021 1:58:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9B295F71-AFBB-4578-A8BB-C19D12F361C4--D40EC46F-05FE-42B9-B5D1-CC64D02225A0 successfully disconnected from port .2340400-92233720368547758083580Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43201076n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2603179889-1165537211-2646719400-329475355410/19/2021 1:58:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9B295F71-AFBB-4578-A8BB-C19D12F361C4--D40EC46F-05FE-42B9-B5D1-CC64D02225A0 (Friendly Name: e226143a-b9d6-4e8d-a35e-c02f82e9960d) successfully connected to port CFBF8B0C-DC05-481A-BC72-F05BFF18C814 (Friendly Name: e226143a-b9d6-4e8d-a35e-c02f82e9960d) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083579Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43201076n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2603179889-1165537211-2646719400-329475355410/19/2021 1:57:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 9B295F71-AFBB-4578-A8BB-C19D12F361C4--D40EC46F-05FE-42B9-B5D1-CC64D02225A0 (Friendly Name: ).2330400-92233720368547758083578Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43201076n-h1-789963-20.cbci-789963-20.local10/19/2021 1:57:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 44DF5F43-3D17-4035-A55D-3DB2BD253BF3--A057329E-76E0-4C72-A52B-DA03EAD2498C (Friendly Name: 4c402f8a-b88e-4efb-9004-2baef7f165c0).2330400-92233720368547758083577Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42483432n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1155489603-1077230871-2990366117-408073977310/19/2021 1:57:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 44DF5F43-3D17-4035-A55D-3DB2BD253BF3--A057329E-76E0-4C72-A52B-DA03EAD2498C successfully disconnected from port .2340400-92233720368547758083576Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42483432n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1155489603-1077230871-2990366117-408073977310/19/2021 1:57:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 44DF5F43-3D17-4035-A55D-3DB2BD253BF3--A057329E-76E0-4C72-A52B-DA03EAD2498C (Friendly Name: 4c402f8a-b88e-4efb-9004-2baef7f165c0) successfully connected to port B597D5D5-BE06-4269-826F-C94C12B107F7 (Friendly Name: 4c402f8a-b88e-4efb-9004-2baef7f165c0) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083575Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42483432n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1155489603-1077230871-2990366117-408073977310/19/2021 1:57:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 44DF5F43-3D17-4035-A55D-3DB2BD253BF3--A057329E-76E0-4C72-A52B-DA03EAD2498C (Friendly Name: ).2330400-92233720368547758083574Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42483432n-h1-789963-20.cbci-789963-20.local10/19/2021 1:57:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic DD07A8AB-1E14-4ECB-82E6-D4A5CC0029E7--F1753A5D-EDC9-4A21-8FF7-B26CDA62599D (Friendly Name: d06e5e9f-9dd8-4899-a464-420ebaa62d83).2330400-92233720368547758083573Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36722968n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3708266667-1321934356-2782193282-387822407610/19/2021 1:56:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DD07A8AB-1E14-4ECB-82E6-D4A5CC0029E7--F1753A5D-EDC9-4A21-8FF7-B26CDA62599D successfully disconnected from port .2340400-92233720368547758083572Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36722968n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3708266667-1321934356-2782193282-387822407610/19/2021 1:56:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DD07A8AB-1E14-4ECB-82E6-D4A5CC0029E7--F1753A5D-EDC9-4A21-8FF7-B26CDA62599D (Friendly Name: d06e5e9f-9dd8-4899-a464-420ebaa62d83) successfully connected to port 91D42B18-7DFF-49B8-9A0D-06F6C0E5C8E4 (Friendly Name: d06e5e9f-9dd8-4899-a464-420ebaa62d83) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083571Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36723508n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3708266667-1321934356-2782193282-387822407610/19/2021 1:56:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic DD07A8AB-1E14-4ECB-82E6-D4A5CC0029E7--F1753A5D-EDC9-4A21-8FF7-B26CDA62599D (Friendly Name: ).2330400-92233720368547758083570Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem36723508n-h1-789963-20.cbci-789963-20.local10/19/2021 1:56:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 213E458E-2633-4DCE-8CE4-5A57416495F4--64075EB7-E0E3-4DF0-B427-F7566C3FC2CE (Friendly Name: c2a18eee-f005-48b9-b304-857cb030bba0).2330400-92233720368547758083569Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45362456n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-557729166-1305355827-1465574540-410343123310/19/2021 1:55:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 213E458E-2633-4DCE-8CE4-5A57416495F4--64075EB7-E0E3-4DF0-B427-F7566C3FC2CE successfully disconnected from port .2340400-92233720368547758083568Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45362456n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-557729166-1305355827-1465574540-410343123310/19/2021 1:55:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 213E458E-2633-4DCE-8CE4-5A57416495F4--64075EB7-E0E3-4DF0-B427-F7566C3FC2CE (Friendly Name: c2a18eee-f005-48b9-b304-857cb030bba0) successfully connected to port 37257F7D-ACB0-4BD1-8198-62F790CAAAAD (Friendly Name: c2a18eee-f005-48b9-b304-857cb030bba0) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083567Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45362456n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-557729166-1305355827-1465574540-410343123310/19/2021 1:54:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 213E458E-2633-4DCE-8CE4-5A57416495F4--64075EB7-E0E3-4DF0-B427-F7566C3FC2CE (Friendly Name: ).2330400-92233720368547758083566Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45362456n-h1-789963-20.cbci-789963-20.local10/19/2021 1:54:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403565Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:54:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D3042598-E8BB-41E1-95D6-C199D427CC43--6CBEF1CD-CBE3-49BD-9E2E-3616D113FA0C (Friendly Name: 86bc06e6-e0c2-46af-8e27-d6685ab9c829).2330400-92233720368547758083564Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27924124n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3540264344-1105324219-2579617429-113745301210/19/2021 1:54:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D3042598-E8BB-41E1-95D6-C199D427CC43--6CBEF1CD-CBE3-49BD-9E2E-3616D113FA0C successfully disconnected from port .2340400-92233720368547758083563Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27924124n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3540264344-1105324219-2579617429-113745301210/19/2021 1:54:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403562Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:53:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2014FD83-3217-4DB6-8247-3ED4207A1C31--D05B3FA4-2E04-4C92-86F9-1E1FF11C63B8 (Friendly Name: 77dbe37b-bd33-414a-83c5-b7f55dee643e).2330400-92233720368547758083561Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48283392n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-538246531-1303786007-3560851330-82394985610/19/2021 1:52:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2014FD83-3217-4DB6-8247-3ED4207A1C31--D05B3FA4-2E04-4C92-86F9-1E1FF11C63B8 successfully disconnected from port .2340400-92233720368547758083560Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48283392n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-538246531-1303786007-3560851330-82394985610/19/2021 1:52:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-37-14-62 has moved from port 90558DFB-D5C5-45A5-AA9A-E046AB19E270 (Friendly Name: 77dbe37b-bd33-414a-83c5-b7f55dee643e) to port 90558DFB-D5C5-45A5-AA9A-E046AB19E270 (Friendly Name: 77dbe37b-bd33-414a-83c5-b7f55dee643e).250410180-92233720368547758083559Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25082816n-h1-789963-20.cbci-789963-20.local10/19/2021 1:51:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2014FD83-3217-4DB6-8247-3ED4207A1C31--D05B3FA4-2E04-4C92-86F9-1E1FF11C63B8 (Friendly Name: 77dbe37b-bd33-414a-83c5-b7f55dee643e) successfully connected to port 90558DFB-D5C5-45A5-AA9A-E046AB19E270 (Friendly Name: 77dbe37b-bd33-414a-83c5-b7f55dee643e) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083558Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48283392n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-538246531-1303786007-3560851330-82394985610/19/2021 1:51:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2014FD83-3217-4DB6-8247-3ED4207A1C31--D05B3FA4-2E04-4C92-86F9-1E1FF11C63B8 (Friendly Name: ).2330400-92233720368547758083557Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48281088n-h1-789963-20.cbci-789963-20.local10/19/2021 1:51:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C17340DE-97DB-48D1-AC86-7A40BAB459DB--17A3EBF0-F5A4-4D57-BEE9-0ACB7E7804C4 (Friendly Name: 77dbe37b-bd33-414a-83c5-b7f55dee643e).2330400-92233720368547758083556Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5020956n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3245555934-1221695451-1081771692-368008927410/19/2021 1:51:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C17340DE-97DB-48D1-AC86-7A40BAB459DB--17A3EBF0-F5A4-4D57-BEE9-0ACB7E7804C4 successfully disconnected from port .2340400-92233720368547758083555Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5020956n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3245555934-1221695451-1081771692-368008927410/19/2021 1:51:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C17340DE-97DB-48D1-AC86-7A40BAB459DB--17A3EBF0-F5A4-4D57-BEE9-0ACB7E7804C4 (Friendly Name: 77dbe37b-bd33-414a-83c5-b7f55dee643e) successfully connected to port 3A2063A8-E153-4D0C-B4DC-6BB8B5F3C577 (Friendly Name: 77dbe37b-bd33-414a-83c5-b7f55dee643e) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083554Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50203908n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3245555934-1221695451-1081771692-368008927410/19/2021 1:49:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C17340DE-97DB-48D1-AC86-7A40BAB459DB--17A3EBF0-F5A4-4D57-BEE9-0ACB7E7804C4 (Friendly Name: ).2330400-92233720368547758083553Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50203908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:49:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403552Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:49:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A5937E31-8402-4258-B045-89B5974D8296--F1E58107-0F14-4585-BC5A-0926C78AF146 (Friendly Name: 4817a04f-4ac4-4c66-9682-a9a94e35558c).2330400-92233720368547758083551Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34842288n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2777906737-1113097218-3045672368-252512194310/19/2021 1:49:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A5937E31-8402-4258-B045-89B5974D8296--F1E58107-0F14-4585-BC5A-0926C78AF146 successfully disconnected from port .2340400-92233720368547758083550Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34842288n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2777906737-1113097218-3045672368-252512194310/19/2021 1:49:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D3042598-E8BB-41E1-95D6-C199D427CC43--6CBEF1CD-CBE3-49BD-9E2E-3616D113FA0C (Friendly Name: 86bc06e6-e0c2-46af-8e27-d6685ab9c829) successfully connected to port 60159069-FA61-4304-BFF8-FFA1C427243A (Friendly Name: 86bc06e6-e0c2-46af-8e27-d6685ab9c829) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083549Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27924124n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3540264344-1105324219-2579617429-113745301210/19/2021 1:48:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D3042598-E8BB-41E1-95D6-C199D427CC43--6CBEF1CD-CBE3-49BD-9E2E-3616D113FA0C (Friendly Name: ).2330400-92233720368547758083548Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27924124n-h1-789963-20.cbci-789963-20.local10/19/2021 1:48:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A5937E31-8402-4258-B045-89B5974D8296--F1E58107-0F14-4585-BC5A-0926C78AF146 (Friendly Name: 4817a04f-4ac4-4c66-9682-a9a94e35558c) successfully connected to port C2A55502-ED41-46B0-AA5F-83AF3A65CD91 (Friendly Name: 4817a04f-4ac4-4c66-9682-a9a94e35558c) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083547Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34842288n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2777906737-1113097218-3045672368-252512194310/19/2021 1:48:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A5937E31-8402-4258-B045-89B5974D8296--F1E58107-0F14-4585-BC5A-0926C78AF146 (Friendly Name: ).2330400-92233720368547758083546Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem34842288n-h1-789963-20.cbci-789963-20.local10/19/2021 1:48:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A598B13E-49A2-4DFE-AAB9-25F37A080F31--A05FA762-9227-46C8-A52B-25B4A06BC349 (Friendly Name: ffcf614a-1e80-47c9-af02-30491c845bd6).2330400-92233720368547758083545Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23804116n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2778247486-1308510626-4079335850-82306879410/19/2021 1:47:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A598B13E-49A2-4DFE-AAB9-25F37A080F31--A05FA762-9227-46C8-A52B-25B4A06BC349 successfully disconnected from port .2340400-92233720368547758083544Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23804116n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2778247486-1308510626-4079335850-82306879410/19/2021 1:47:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 0E8B3E2A-244D-41D4-8183-1CCD28BA4BA1--EA6B16B2-11B9-4D90-B3D0-1D1FBCBD001F (Friendly Name: d6e5805e-66ba-48c9-b348-e1e90d70ed02).2330400-92233720368547758083543Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44641052n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-244006442-1104421965-3441197953-270609463210/19/2021 1:47:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0E8B3E2A-244D-41D4-8183-1CCD28BA4BA1--EA6B16B2-11B9-4D90-B3D0-1D1FBCBD001F successfully disconnected from port .2340400-92233720368547758083542Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44641052n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-244006442-1104421965-3441197953-270609463210/19/2021 1:47:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403541Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:47:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A598B13E-49A2-4DFE-AAB9-25F37A080F31--A05FA762-9227-46C8-A52B-25B4A06BC349 (Friendly Name: ffcf614a-1e80-47c9-af02-30491c845bd6) successfully connected to port 7AD633B4-16FD-4D9D-9387-F64DA5F50132 (Friendly Name: ffcf614a-1e80-47c9-af02-30491c845bd6) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083540Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23803056n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2778247486-1308510626-4079335850-82306879410/19/2021 1:47:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A598B13E-49A2-4DFE-AAB9-25F37A080F31--A05FA762-9227-46C8-A52B-25B4A06BC349 (Friendly Name: ).2330400-92233720368547758083539Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23803056n-h1-789963-20.cbci-789963-20.local10/19/2021 1:47:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-F6-06-3A has moved from port F636927F-6729-403B-A03E-AD7412EB486B (Friendly Name: d6e5805e-66ba-48c9-b348-e1e90d70ed02) to port F636927F-6729-403B-A03E-AD7412EB486B (Friendly Name: d6e5805e-66ba-48c9-b348-e1e90d70ed02).250410180-92233720368547758083538Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25082796n-h1-789963-20.cbci-789963-20.local10/19/2021 1:46:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 0E8B3E2A-244D-41D4-8183-1CCD28BA4BA1--EA6B16B2-11B9-4D90-B3D0-1D1FBCBD001F (Friendly Name: d6e5805e-66ba-48c9-b348-e1e90d70ed02) successfully connected to port F636927F-6729-403B-A03E-AD7412EB486B (Friendly Name: d6e5805e-66ba-48c9-b348-e1e90d70ed02) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083537Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44644216n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-244006442-1104421965-3441197953-270609463210/19/2021 1:46:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 0E8B3E2A-244D-41D4-8183-1CCD28BA4BA1--EA6B16B2-11B9-4D90-B3D0-1D1FBCBD001F (Friendly Name: ).2330400-92233720368547758083536Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44643140n-h1-789963-20.cbci-789963-20.local10/19/2021 1:46:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7B6C685C-88A1-4C0E-ACCE-FE20810A940C--0D4597C8-1925-43F6-9766-88A0F2DF09B7 (Friendly Name: d6e5805e-66ba-48c9-b348-e1e90d70ed02).2330400-92233720368547758083535Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29122044n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2070702172-1276020897-553569964-21102860910/19/2021 1:46:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7B6C685C-88A1-4C0E-ACCE-FE20810A940C--0D4597C8-1925-43F6-9766-88A0F2DF09B7 successfully disconnected from port .2340400-92233720368547758083534Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29122044n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2070702172-1276020897-553569964-21102860910/19/2021 1:46:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7B6C685C-88A1-4C0E-ACCE-FE20810A940C--0D4597C8-1925-43F6-9766-88A0F2DF09B7 (Friendly Name: d6e5805e-66ba-48c9-b348-e1e90d70ed02) successfully connected to port 16237DE1-5B21-4310-ABCB-3051B1F7E8B5 (Friendly Name: d6e5805e-66ba-48c9-b348-e1e90d70ed02) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083533Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29124664n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2070702172-1276020897-553569964-21102860910/19/2021 1:45:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7B6C685C-88A1-4C0E-ACCE-FE20810A940C--0D4597C8-1925-43F6-9766-88A0F2DF09B7 (Friendly Name: ).2330400-92233720368547758083532Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29124664n-h1-789963-20.cbci-789963-20.local10/19/2021 1:45:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118403531Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:44:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5A7D9DA3-3C4B-4933-A30E-93E6B52B94A7--6B202D5A-7977-4661-B109-CAC246E97E10 (Friendly Name: 344082ca-4b11-4805-8a18-98039244f2d5).2330400-92233720368547758083530Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8164248n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1518181795-1228094539-3868397219-281150558910/19/2021 1:43:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5A7D9DA3-3C4B-4933-A30E-93E6B52B94A7--6B202D5A-7977-4661-B109-CAC246E97E10 successfully disconnected from port .2340400-92233720368547758083529Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8164248n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1518181795-1228094539-3868397219-281150558910/19/2021 1:43:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5A7D9DA3-3C4B-4933-A30E-93E6B52B94A7--6B202D5A-7977-4661-B109-CAC246E97E10 (Friendly Name: 344082ca-4b11-4805-8a18-98039244f2d5) successfully connected to port F73F8287-9D42-4D34-9ACB-8C56EABD18F3 (Friendly Name: 344082ca-4b11-4805-8a18-98039244f2d5) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083528Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8164744n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1518181795-1228094539-3868397219-281150558910/19/2021 1:42:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5A7D9DA3-3C4B-4933-A30E-93E6B52B94A7--6B202D5A-7977-4661-B109-CAC246E97E10 (Friendly Name: ).2330400-92233720368547758083527Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem8164744n-h1-789963-20.cbci-789963-20.local10/19/2021 1:42:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403526Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:42:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403525Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:42:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403524Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:41:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 732BF5E2-5F63-480C-880C-9ECD9AB1BD94--9FFBA051-D34F-4A48-B7E0-39B158B027EC (Friendly Name: 47bd9c8b-ab8b-434e-a14a-7c9a1b24f74c).2330400-92233720368547758083523Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24323336n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1932260834-1208770403-3449687176-249545973810/19/2021 1:41:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 732BF5E2-5F63-480C-880C-9ECD9AB1BD94--9FFBA051-D34F-4A48-B7E0-39B158B027EC successfully disconnected from port .2340400-92233720368547758083522Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24323336n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1932260834-1208770403-3449687176-249545973810/19/2021 1:41:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403521Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:39:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 732BF5E2-5F63-480C-880C-9ECD9AB1BD94--9FFBA051-D34F-4A48-B7E0-39B158B027EC (Friendly Name: 47bd9c8b-ab8b-434e-a14a-7c9a1b24f74c) successfully connected to port C6043028-BD0E-4D50-8617-72A6CC0F485D (Friendly Name: 47bd9c8b-ab8b-434e-a14a-7c9a1b24f74c) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083520Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24324384n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1932260834-1208770403-3449687176-249545973810/19/2021 1:39:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 732BF5E2-5F63-480C-880C-9ECD9AB1BD94--9FFBA051-D34F-4A48-B7E0-39B158B027EC (Friendly Name: ).2330400-92233720368547758083519Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24324384n-h1-789963-20.cbci-789963-20.local10/19/2021 1:39:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C2F429E8-21B4-47E8-B80B-B1A1DC946F0A--A75458D9-5979-4C10-9623-A7D0E899B1F4 (Friendly Name: 0ed82ad4-de18-4e16-81b4-d04afb147327).2330400-92233720368547758083518Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35604676n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3270781416-1206395316-2712734648-17508476410/19/2021 1:39:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C2F429E8-21B4-47E8-B80B-B1A1DC946F0A--A75458D9-5979-4C10-9623-A7D0E899B1F4 successfully disconnected from port .2340400-92233720368547758083517Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35604676n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3270781416-1206395316-2712734648-17508476410/19/2021 1:39:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C2F429E8-21B4-47E8-B80B-B1A1DC946F0A--A75458D9-5979-4C10-9623-A7D0E899B1F4 (Friendly Name: 0ed82ad4-de18-4e16-81b4-d04afb147327) successfully connected to port 75F47BA8-49DB-4F15-8100-715026CA5809 (Friendly Name: 0ed82ad4-de18-4e16-81b4-d04afb147327) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083516Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3560836n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3270781416-1206395316-2712734648-17508476410/19/2021 1:39:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C2F429E8-21B4-47E8-B80B-B1A1DC946F0A--A75458D9-5979-4C10-9623-A7D0E899B1F4 (Friendly Name: ).2330400-92233720368547758083515Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3560836n-h1-789963-20.cbci-789963-20.local10/19/2021 1:39:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6D5C7BD7-DA1A-42D2-A6AD-EBA2069DBD9C--8FA112B7-4554-473F-B051-90ACF1ED9319 (Friendly Name: 20c67397-3676-4bc0-baeb-5e9bade859ec).2330400-92233720368547758083514Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50883720n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1834777559-1121114650-2733354406-262967219810/19/2021 1:38:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6D5C7BD7-DA1A-42D2-A6AD-EBA2069DBD9C--8FA112B7-4554-473F-B051-90ACF1ED9319 successfully disconnected from port .2340400-92233720368547758083513Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50883720n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1834777559-1121114650-2733354406-262967219810/19/2021 1:38:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6D5C7BD7-DA1A-42D2-A6AD-EBA2069DBD9C--8FA112B7-4554-473F-B051-90ACF1ED9319 (Friendly Name: 20c67397-3676-4bc0-baeb-5e9bade859ec) successfully connected to port 9E75BF65-B9B9-4C8C-B896-2D407906A54C (Friendly Name: 20c67397-3676-4bc0-baeb-5e9bade859ec) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083512Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50883380n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1834777559-1121114650-2733354406-262967219810/19/2021 1:38:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6D5C7BD7-DA1A-42D2-A6AD-EBA2069DBD9C--8FA112B7-4554-473F-B051-90ACF1ED9319 (Friendly Name: ).2330400-92233720368547758083511Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50883380n-h1-789963-20.cbci-789963-20.local10/19/2021 1:38:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403510Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.local10/19/2021 1:38:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3C30C131-3A14-480B-9BBF-E7DC56CE3511--CD8A87B1-8DD4-45C6-9EED-0721EC51C948 (Friendly Name: 5d5af3d7-90fa-44c0-91c8-00c470361c32).2330400-92233720368547758083509Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4236700n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1009828145-1208695316-3706175387-28873890210/19/2021 1:38:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3C30C131-3A14-480B-9BBF-E7DC56CE3511--CD8A87B1-8DD4-45C6-9EED-0721EC51C948 successfully disconnected from port .2340400-92233720368547758083508Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4236700n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1009828145-1208695316-3706175387-28873890210/19/2021 1:38:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1FDD348D-02CB-45EA-9D78-8F450335D456--4F1E01F5-06F9-404E-A589-CBFFB9B61770 (Friendly Name: 2d5bac4f-ec87-4f65-9855-9846d10cc228).2330400-92233720368547758083507Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17681180n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-534590605-1172964043-1167030429-145674777910/19/2021 1:37:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1FDD348D-02CB-45EA-9D78-8F450335D456--4F1E01F5-06F9-404E-A589-CBFFB9B61770 successfully disconnected from port .2340400-92233720368547758083506Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17681180n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-534590605-1172964043-1167030429-145674777910/19/2021 1:37:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1FDD348D-02CB-45EA-9D78-8F450335D456--4F1E01F5-06F9-404E-A589-CBFFB9B61770 (Friendly Name: 2d5bac4f-ec87-4f65-9855-9846d10cc228) successfully connected to port A97265F3-0FC1-411D-9C34-5B62DBCCB5AD (Friendly Name: 2d5bac4f-ec87-4f65-9855-9846d10cc228) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083505Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17681180n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-534590605-1172964043-1167030429-145674777910/19/2021 1:37:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1FDD348D-02CB-45EA-9D78-8F450335D456--4F1E01F5-06F9-404E-A589-CBFFB9B61770 (Friendly Name: ).2330400-92233720368547758083504Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem17681180n-h1-789963-20.cbci-789963-20.local10/19/2021 1:37:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1FDD348D-02CB-45EA-9D78-8F450335D456--4F1E01F5-06F9-404E-A589-CBFFB9B61770 (Friendly Name: 2d5bac4f-ec87-4f65-9855-9846d10cc228).2330400-92233720368547758083503Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9281368n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-534590605-1172964043-1167030429-145674777910/19/2021 1:37:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1FDD348D-02CB-45EA-9D78-8F450335D456--4F1E01F5-06F9-404E-A589-CBFFB9B61770 successfully disconnected from port .2340400-92233720368547758083502Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9281368n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-534590605-1172964043-1167030429-145674777910/19/2021 1:37:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1FDD348D-02CB-45EA-9D78-8F450335D456--4F1E01F5-06F9-404E-A589-CBFFB9B61770 (Friendly Name: 2d5bac4f-ec87-4f65-9855-9846d10cc228) successfully connected to port A97265F3-0FC1-411D-9C34-5B62DBCCB5AD (Friendly Name: 2d5bac4f-ec87-4f65-9855-9846d10cc228) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083501Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9283496n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-534590605-1172964043-1167030429-145674777910/19/2021 1:37:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1FDD348D-02CB-45EA-9D78-8F450335D456--4F1E01F5-06F9-404E-A589-CBFFB9B61770 (Friendly Name: ).2330400-92233720368547758083500Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem9283496n-h1-789963-20.cbci-789963-20.local10/19/2021 1:37:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1FDD348D-02CB-45EA-9D78-8F450335D456--4F1E01F5-06F9-404E-A589-CBFFB9B61770 (Friendly Name: 2d5bac4f-ec87-4f65-9855-9846d10cc228).2330400-92233720368547758083499Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33243484n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-534590605-1172964043-1167030429-145674777910/19/2021 1:37:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1FDD348D-02CB-45EA-9D78-8F450335D456--4F1E01F5-06F9-404E-A589-CBFFB9B61770 successfully disconnected from port .2340400-92233720368547758083498Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33243484n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-534590605-1172964043-1167030429-145674777910/19/2021 1:37:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1FDD348D-02CB-45EA-9D78-8F450335D456--4F1E01F5-06F9-404E-A589-CBFFB9B61770 (Friendly Name: 2d5bac4f-ec87-4f65-9855-9846d10cc228) successfully connected to port A97265F3-0FC1-411D-9C34-5B62DBCCB5AD (Friendly Name: 2d5bac4f-ec87-4f65-9855-9846d10cc228) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083497Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33242688n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-534590605-1172964043-1167030429-145674777910/19/2021 1:37:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1FDD348D-02CB-45EA-9D78-8F450335D456--4F1E01F5-06F9-404E-A589-CBFFB9B61770 (Friendly Name: ).2330400-92233720368547758083496Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33242688n-h1-789963-20.cbci-789963-20.local10/19/2021 1:37:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C4C452B6-478E-47CA-8E00-9D5269FD644C--B331AB0C-59DD-4173-A167-AB22B6DBB254 (Friendly Name: 1abe5e21-fac4-4763-9e94-064f3cfde1c8).2330400-92233720368547758083495Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18804708n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3301200566-1204438926-1386021006-128168688910/19/2021 1:37:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C4C452B6-478E-47CA-8E00-9D5269FD644C--B331AB0C-59DD-4173-A167-AB22B6DBB254 successfully disconnected from port .2340400-92233720368547758083494Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18804708n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3301200566-1204438926-1386021006-128168688910/19/2021 1:37:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 37F61BFD-8CD3-44FB-ACD3-0962818038B5--5DE5F818-A8BC-44D2-AFE7-EEF396C9C194 (Friendly Name: b4b78101-99f9-4f80-af7d-e8d1b9ccf3bb).2330400-92233720368547758083493Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50921212n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-938875901-1157336275-1644811180-304037900910/19/2021 1:37:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 37F61BFD-8CD3-44FB-ACD3-0962818038B5--5DE5F818-A8BC-44D2-AFE7-EEF396C9C194 successfully disconnected from port .2340400-92233720368547758083492Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50921212n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-938875901-1157336275-1644811180-304037900910/19/2021 1:37:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403491Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:37:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403490Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:36:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403489Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:36:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403488Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:36:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403487Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:35:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 37F61BFD-8CD3-44FB-ACD3-0962818038B5--5DE5F818-A8BC-44D2-AFE7-EEF396C9C194 (Friendly Name: b4b78101-99f9-4f80-af7d-e8d1b9ccf3bb) successfully connected to port 864D550B-C76C-43A8-AF67-9DB26AB3DCE0 (Friendly Name: b4b78101-99f9-4f80-af7d-e8d1b9ccf3bb) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083486Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50924896n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-938875901-1157336275-1644811180-304037900910/19/2021 1:35:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 37F61BFD-8CD3-44FB-ACD3-0962818038B5--5DE5F818-A8BC-44D2-AFE7-EEF396C9C194 (Friendly Name: ).2330400-92233720368547758083485Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50924896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:35:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--F8AE655E-831C-4196-9637-9A2CD545D854 (Friendly Name: 319032d6-299f-436a-864d-e155922bcabc).2330400-92233720368547758083484Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--F8AE655E-831C-4196-9637-9A2CD545D854 successfully disconnected from port .2340400-92233720368547758083483Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--BD9D8846-E72F-4756-87A6-A0332FF78565 (Friendly Name: 2ba632fe-f881-4852-bdef-818041d15035).2330400-92233720368547758083482Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--BD9D8846-E72F-4756-87A6-A0332FF78565 successfully disconnected from port .2340400-92233720368547758083481Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--6E0FDE6A-6EC3-47AB-ACE1-1FBA39985D56 (Friendly Name: b95fc44e-cceb-4940-8314-f54f83bcbbdb).2330400-92233720368547758083480Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--6E0FDE6A-6EC3-47AB-ACE1-1FBA39985D56 successfully disconnected from port .2340400-92233720368547758083479Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--10650073-AE3E-4B24-8044-5EA1DB7481DD (Friendly Name: 0cee8129-6f48-4c06-8f78-94ad6bcb64de).2330400-92233720368547758083478Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--10650073-AE3E-4B24-8044-5EA1DB7481DD successfully disconnected from port .2340400-92233720368547758083477Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--00DB3916-7218-43A3-99EF-5945C9FE9164 (Friendly Name: 54786449-57f3-400d-8684-0d0a85275188).2330400-92233720368547758083476Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--00DB3916-7218-43A3-99EF-5945C9FE9164 successfully disconnected from port .2340400-92233720368547758083475Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--1F8AF853-FD4C-4896-BEA7-CC241897F77D (Friendly Name: d7ae8147-6ed7-46d7-bac5-7a52fff1ec86).2330400-92233720368547758083474Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--1F8AF853-FD4C-4896-BEA7-CC241897F77D successfully disconnected from port .2340400-92233720368547758083473Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--217FE3EC-B17D-4687-ADE5-A619641F8C2E (Friendly Name: 2907f8d0-4273-40f2-bf0a-1eb7e75d9f31).2330400-92233720368547758083472Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--217FE3EC-B17D-4687-ADE5-A619641F8C2E successfully disconnected from port .2340400-92233720368547758083471Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:35:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C4C452B6-478E-47CA-8E00-9D5269FD644C--B331AB0C-59DD-4173-A167-AB22B6DBB254 (Friendly Name: 1abe5e21-fac4-4763-9e94-064f3cfde1c8) successfully connected to port 8A2E9272-1EA6-422D-9CA0-1C408640F2CC (Friendly Name: 1abe5e21-fac4-4763-9e94-064f3cfde1c8) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083470Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18804708n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3301200566-1204438926-1386021006-128168688910/19/2021 1:35:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C4C452B6-478E-47CA-8E00-9D5269FD644C--B331AB0C-59DD-4173-A167-AB22B6DBB254 (Friendly Name: ).2330400-92233720368547758083469Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18804708n-h1-789963-20.cbci-789963-20.local10/19/2021 1:35:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3E45FE6F-5883-4E76-AEE7-7B6A80FA6EAB--7184B45D-A629-4F15-96D2-50D6E9BBE711 (Friendly Name: c1b5f7cd-1363-4344-aba7-8d7032879cd4).2330400-92233720368547758083468Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48723756n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1044774511-1316378755-1786505134-287617702410/19/2021 1:34:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3E45FE6F-5883-4E76-AEE7-7B6A80FA6EAB--7184B45D-A629-4F15-96D2-50D6E9BBE711 successfully disconnected from port .2340400-92233720368547758083467Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48723756n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1044774511-1316378755-1786505134-287617702410/19/2021 1:34:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403466Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:34:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3E45FE6F-5883-4E76-AEE7-7B6A80FA6EAB--7184B45D-A629-4F15-96D2-50D6E9BBE711 (Friendly Name: c1b5f7cd-1363-4344-aba7-8d7032879cd4) successfully connected to port 853BBBAE-1EB5-42EB-AFEF-B95BF8AC9A22 (Friendly Name: c1b5f7cd-1363-4344-aba7-8d7032879cd4) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083465Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48723756n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1044774511-1316378755-1786505134-287617702410/19/2021 1:34:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3E45FE6F-5883-4E76-AEE7-7B6A80FA6EAB--7184B45D-A629-4F15-96D2-50D6E9BBE711 (Friendly Name: ).2330400-92233720368547758083464Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48723756n-h1-789963-20.cbci-789963-20.local10/19/2021 1:34:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403463Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:33:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403462Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.local10/19/2021 1:33:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A1B7C0FE-12AD-400C-A4F5-07F5E743CBA4--92567BA8-5AF0-4DA2-AD25-B879038DA8F9 (Friendly Name: 336b2a75-331e-4479-b32d-9e92deb3deaf).2330400-92233720368547758083461Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51003392n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2713174270-1074533037-4110939556-276478461510/19/2021 1:33:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A1B7C0FE-12AD-400C-A4F5-07F5E743CBA4--92567BA8-5AF0-4DA2-AD25-B879038DA8F9 successfully disconnected from port .2340400-92233720368547758083460Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51003392n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2713174270-1074533037-4110939556-276478461510/19/2021 1:33:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3C30C131-3A14-480B-9BBF-E7DC56CE3511--CD8A87B1-8DD4-45C6-9EED-0721EC51C948 (Friendly Name: 5d5af3d7-90fa-44c0-91c8-00c470361c32) successfully connected to port C80CAEFC-6696-4975-8BD8-7645CA0E5944 (Friendly Name: 5d5af3d7-90fa-44c0-91c8-00c470361c32) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083459Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42364552n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1009828145-1208695316-3706175387-28873890210/19/2021 1:33:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3C30C131-3A14-480B-9BBF-E7DC56CE3511--CD8A87B1-8DD4-45C6-9EED-0721EC51C948 (Friendly Name: ).2330400-92233720368547758083458Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42364552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:33:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403457Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.local10/19/2021 1:33:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 051CFC48-46B9-4B3C-9EB2-B62FE7D78CFF--F407CEC8-3DBF-4FA7-872E-0F76D619EE8C (Friendly Name: 4728d83c-694a-4571-9966-720c78b34058).2330400-92233720368547758083456Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25603892n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-85785672-1262241465-800502430-428742039110/19/2021 1:32:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 051CFC48-46B9-4B3C-9EB2-B62FE7D78CFF--F407CEC8-3DBF-4FA7-872E-0F76D619EE8C successfully disconnected from port .2340400-92233720368547758083455Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25603892n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-85785672-1262241465-800502430-428742039110/19/2021 1:32:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 30EF161D-20D2-440A-8220-6730FF76BA8F--17BB2844-8576-4AB8-9E67-7CDF8F65E01C (Friendly Name: cbbfbbeb-ba2a-4a2d-a798-e436d2b877a6).2330400-92233720368547758083454Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29161776n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-820975133-1141514450-812064898-241136204710/19/2021 1:31:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 30EF161D-20D2-440A-8220-6730FF76BA8F--17BB2844-8576-4AB8-9E67-7CDF8F65E01C successfully disconnected from port .2340400-92233720368547758083453Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29161776n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-820975133-1141514450-812064898-241136204710/19/2021 1:31:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 051CFC48-46B9-4B3C-9EB2-B62FE7D78CFF--F407CEC8-3DBF-4FA7-872E-0F76D619EE8C (Friendly Name: 4728d83c-694a-4571-9966-720c78b34058) successfully connected to port F8BC7A4C-D9DA-40F1-91DD-BAF3EB106844 (Friendly Name: 4728d83c-694a-4571-9966-720c78b34058) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083452Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25604028n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-85785672-1262241465-800502430-428742039110/19/2021 1:31:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 051CFC48-46B9-4B3C-9EB2-B62FE7D78CFF--F407CEC8-3DBF-4FA7-872E-0F76D619EE8C (Friendly Name: ).2330400-92233720368547758083451Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25604028n-h1-789963-20.cbci-789963-20.local10/19/2021 1:31:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 30EF161D-20D2-440A-8220-6730FF76BA8F--17BB2844-8576-4AB8-9E67-7CDF8F65E01C (Friendly Name: cbbfbbeb-ba2a-4a2d-a798-e436d2b877a6) successfully connected to port 6835650E-6502-4525-98C4-793172D4A1EE (Friendly Name: cbbfbbeb-ba2a-4a2d-a798-e436d2b877a6) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083450Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29161776n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-820975133-1141514450-812064898-241136204710/19/2021 1:31:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 30EF161D-20D2-440A-8220-6730FF76BA8F--17BB2844-8576-4AB8-9E67-7CDF8F65E01C (Friendly Name: ).2330400-92233720368547758083449Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29161776n-h1-789963-20.cbci-789963-20.local10/19/2021 1:31:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A1B7C0FE-12AD-400C-A4F5-07F5E743CBA4--92567BA8-5AF0-4DA2-AD25-B879038DA8F9 (Friendly Name: 336b2a75-331e-4479-b32d-9e92deb3deaf) successfully connected to port 86282646-732E-474A-8008-67BEAF906456 (Friendly Name: 336b2a75-331e-4479-b32d-9e92deb3deaf) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083448Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51003392n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2713174270-1074533037-4110939556-276478461510/19/2021 1:30:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A1B7C0FE-12AD-400C-A4F5-07F5E743CBA4--92567BA8-5AF0-4DA2-AD25-B879038DA8F9 (Friendly Name: ).2330400-92233720368547758083447Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem51003392n-h1-789963-20.cbci-789963-20.local10/19/2021 1:30:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403446Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:30:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5C64C2EF-501C-4300-8AA5-2D8FCED6C6C5--7EB008F4-3C55-4B02-9B7D-AEFDFA95D07D (Friendly Name: d8e2cef0-b27f-4f08-ba28-b549cfadcefc).2330400-92233720368547758083445Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26883664n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1550107375-1124093980-2402133386-331814267010/19/2021 1:30:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5C64C2EF-501C-4300-8AA5-2D8FCED6C6C5--7EB008F4-3C55-4B02-9B7D-AEFDFA95D07D successfully disconnected from port .2340400-92233720368547758083444Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26883664n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1550107375-1124093980-2402133386-331814267010/19/2021 1:30:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5C64C2EF-501C-4300-8AA5-2D8FCED6C6C5--7EB008F4-3C55-4B02-9B7D-AEFDFA95D07D (Friendly Name: d8e2cef0-b27f-4f08-ba28-b549cfadcefc) successfully connected to port 6AA1F206-7A47-4760-B1C1-4DE7774923E8 (Friendly Name: d8e2cef0-b27f-4f08-ba28-b549cfadcefc) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083443Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26883664n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1550107375-1124093980-2402133386-331814267010/19/2021 1:30:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5C64C2EF-501C-4300-8AA5-2D8FCED6C6C5--7EB008F4-3C55-4B02-9B7D-AEFDFA95D07D (Friendly Name: ).2330400-92233720368547758083442Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26883664n-h1-789963-20.cbci-789963-20.local10/19/2021 1:30:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5C64C2EF-501C-4300-8AA5-2D8FCED6C6C5--7EB008F4-3C55-4B02-9B7D-AEFDFA95D07D (Friendly Name: d8e2cef0-b27f-4f08-ba28-b549cfadcefc).2330400-92233720368547758083441Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26883664n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1550107375-1124093980-2402133386-331814267010/19/2021 1:30:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5C64C2EF-501C-4300-8AA5-2D8FCED6C6C5--7EB008F4-3C55-4B02-9B7D-AEFDFA95D07D successfully disconnected from port .2340400-92233720368547758083440Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26883664n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1550107375-1124093980-2402133386-331814267010/19/2021 1:30:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403439Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:30:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5C64C2EF-501C-4300-8AA5-2D8FCED6C6C5--7EB008F4-3C55-4B02-9B7D-AEFDFA95D07D (Friendly Name: d8e2cef0-b27f-4f08-ba28-b549cfadcefc) successfully connected to port 6AA1F206-7A47-4760-B1C1-4DE7774923E8 (Friendly Name: d8e2cef0-b27f-4f08-ba28-b549cfadcefc) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083438Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26883664n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1550107375-1124093980-2402133386-331814267010/19/2021 1:30:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5C64C2EF-501C-4300-8AA5-2D8FCED6C6C5--7EB008F4-3C55-4B02-9B7D-AEFDFA95D07D (Friendly Name: ).2330400-92233720368547758083437Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26883664n-h1-789963-20.cbci-789963-20.local10/19/2021 1:30:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403436Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:30:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403435Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:30:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F21CAAD2-0E93-4A32-B4CC-76BD74516BE2--7D9DDB03-DFFE-4093-A2F4-7C176D4511C9 (Friendly Name: 2be4832d-f50a-48a5-8bd0-b5afaa0d46c4).2330400-92233720368547758083434Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47484480n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4061965010-1244794515-3178679476-379868402010/19/2021 1:30:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F21CAAD2-0E93-4A32-B4CC-76BD74516BE2--7D9DDB03-DFFE-4093-A2F4-7C176D4511C9 successfully disconnected from port .2340400-92233720368547758083433Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47484480n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4061965010-1244794515-3178679476-379868402010/19/2021 1:30:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403432Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:29:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 04FAAC11-0438-4BA2-85C3-28F6D574E799--DB54AAAD-44D5-4BB0-A635-2155A15D1A71 (Friendly Name: 6cf8a907-386c-4f61-a104-d4f35da752ef).2330400-92233720368547758083431Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45123248n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-83536913-1268909112-4129866629-258208277310/19/2021 1:29:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 04FAAC11-0438-4BA2-85C3-28F6D574E799--DB54AAAD-44D5-4BB0-A635-2155A15D1A71 successfully disconnected from port .2340400-92233720368547758083430Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45123248n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-83536913-1268909112-4129866629-258208277310/19/2021 1:29:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 04FAAC11-0438-4BA2-85C3-28F6D574E799--DB54AAAD-44D5-4BB0-A635-2155A15D1A71 (Friendly Name: 6cf8a907-386c-4f61-a104-d4f35da752ef) successfully connected to port 18DBF1D6-3881-4A77-8F85-614EC937904D (Friendly Name: 6cf8a907-386c-4f61-a104-d4f35da752ef) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083429Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45123248n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-83536913-1268909112-4129866629-258208277310/19/2021 1:29:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 04FAAC11-0438-4BA2-85C3-28F6D574E799--DB54AAAD-44D5-4BB0-A635-2155A15D1A71 (Friendly Name: ).2330400-92233720368547758083428Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45123248n-h1-789963-20.cbci-789963-20.local10/19/2021 1:29:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2AC6B2B1-621C-4BF7-9546-0397633147F9--3A483A29-9159-439F-8173-E02DA29BC5B6 (Friendly Name: e598cceb-2558-4fff-8e25-f9ded6345045).2330400-92233720368547758083427Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45444260n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-717664945-1274503708-2533574293-418219248310/19/2021 1:28:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2AC6B2B1-621C-4BF7-9546-0397633147F9--3A483A29-9159-439F-8173-E02DA29BC5B6 successfully disconnected from port .2340400-92233720368547758083426Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45444260n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-717664945-1274503708-2533574293-418219248310/19/2021 1:28:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403425Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:28:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403424Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800900n-h1-789963-20.cbci-789963-20.local10/19/2021 1:28:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3CA82D6F-6500-4562-9240-C19BED4AC8CA--55AE9189-296E-46ED-9885-5767D12ED1FC (Friendly Name: d3bb2bba-f667-41f5-9b86-489126c8740c).2330400-92233720368547758083423Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43364816n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1017654639-1164076288-2613133458-340212401310/19/2021 1:28:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3CA82D6F-6500-4562-9240-C19BED4AC8CA--55AE9189-296E-46ED-9885-5767D12ED1FC successfully disconnected from port .2340400-92233720368547758083422Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43364816n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1017654639-1164076288-2613133458-340212401310/19/2021 1:28:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2AC6B2B1-621C-4BF7-9546-0397633147F9--3A483A29-9159-439F-8173-E02DA29BC5B6 (Friendly Name: e598cceb-2558-4fff-8e25-f9ded6345045) successfully connected to port 4AEB47C0-721D-414D-9A03-D22BF9240BBD (Friendly Name: e598cceb-2558-4fff-8e25-f9ded6345045) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083421Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45444256n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-717664945-1274503708-2533574293-418219248310/19/2021 1:28:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2AC6B2B1-621C-4BF7-9546-0397633147F9--3A483A29-9159-439F-8173-E02DA29BC5B6 (Friendly Name: ).2330400-92233720368547758083420Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45444256n-h1-789963-20.cbci-789963-20.local10/19/2021 1:28:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F21CAAD2-0E93-4A32-B4CC-76BD74516BE2--7D9DDB03-DFFE-4093-A2F4-7C176D4511C9 (Friendly Name: 2be4832d-f50a-48a5-8bd0-b5afaa0d46c4) successfully connected to port D5534766-5EB4-4A3E-87B8-FC2F998B808C (Friendly Name: 2be4832d-f50a-48a5-8bd0-b5afaa0d46c4) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083419Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47484664n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4061965010-1244794515-3178679476-379868402010/19/2021 1:27:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F21CAAD2-0E93-4A32-B4CC-76BD74516BE2--7D9DDB03-DFFE-4093-A2F4-7C176D4511C9 (Friendly Name: ).2330400-92233720368547758083418Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47484664n-h1-789963-20.cbci-789963-20.local10/19/2021 1:27:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--217FE3EC-B17D-4687-ADE5-A619641F8C2E (Friendly Name: 2907f8d0-4273-40f2-bf0a-1eb7e75d9f31) successfully connected to port 2A6F4FE5-FFA3-452C-B9E9-C331E4C37D5E (Friendly Name: 2907f8d0-4273-40f2-bf0a-1eb7e75d9f31) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083417Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--217FE3EC-B17D-4687-ADE5-A619641F8C2E (Friendly Name: ).2330400-92233720368547758083416Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.local10/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--1F8AF853-FD4C-4896-BEA7-CC241897F77D (Friendly Name: d7ae8147-6ed7-46d7-bac5-7a52fff1ec86) successfully connected to port AD068E3A-50F7-4825-A7F5-1E875779CA55 (Friendly Name: d7ae8147-6ed7-46d7-bac5-7a52fff1ec86) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083415Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--1F8AF853-FD4C-4896-BEA7-CC241897F77D (Friendly Name: ).2330400-92233720368547758083414Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.local10/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--00DB3916-7218-43A3-99EF-5945C9FE9164 (Friendly Name: 54786449-57f3-400d-8684-0d0a85275188) successfully connected to port AE9CE9FD-1894-4BF6-A910-F4EFC57B2EC1 (Friendly Name: 54786449-57f3-400d-8684-0d0a85275188) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083413Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--00DB3916-7218-43A3-99EF-5945C9FE9164 (Friendly Name: ).2330400-92233720368547758083412Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.local10/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--10650073-AE3E-4B24-8044-5EA1DB7481DD (Friendly Name: 0cee8129-6f48-4c06-8f78-94ad6bcb64de) successfully connected to port 4E6B88E1-522B-4C6E-810E-242DAC6E4027 (Friendly Name: 0cee8129-6f48-4c06-8f78-94ad6bcb64de) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083411Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--10650073-AE3E-4B24-8044-5EA1DB7481DD (Friendly Name: ).2330400-92233720368547758083410Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.local10/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--6E0FDE6A-6EC3-47AB-ACE1-1FBA39985D56 (Friendly Name: b95fc44e-cceb-4940-8314-f54f83bcbbdb) successfully connected to port 3E9C2F60-AF09-42FB-82EB-17AB8EB92E9F (Friendly Name: b95fc44e-cceb-4940-8314-f54f83bcbbdb) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083409Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--6E0FDE6A-6EC3-47AB-ACE1-1FBA39985D56 (Friendly Name: ).2330400-92233720368547758083408Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.local10/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--BD9D8846-E72F-4756-87A6-A0332FF78565 (Friendly Name: 2ba632fe-f881-4852-bdef-818041d15035) successfully connected to port 43DBAEFC-B35B-470C-A395-1CEB777132E2 (Friendly Name: 2ba632fe-f881-4852-bdef-818041d15035) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083407Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--BD9D8846-E72F-4756-87A6-A0332FF78565 (Friendly Name: ).2330400-92233720368547758083406Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.local10/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AD234EAD-687D-43A3-94F9-CCF233653010--F8AE655E-831C-4196-9637-9A2CD545D854 (Friendly Name: 319032d6-299f-436a-864d-e155922bcabc) successfully connected to port EEDA5749-F847-4A37-86FF-3898B89EC2D6 (Friendly Name: 319032d6-299f-436a-864d-e155922bcabc) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083405Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2904772269-1134782589-4073519508-27160709110/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AD234EAD-687D-43A3-94F9-CCF233653010--F8AE655E-831C-4196-9637-9A2CD545D854 (Friendly Name: ).2330400-92233720368547758083404Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3508812n-h1-789963-20.cbci-789963-20.local10/19/2021 1:27:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic CB5CD702-491B-4A27-893A-5EDBD062FD94--986BE93E-73AA-4F04-85A2-F8DEB093168F (Friendly Name: e80d3a03-bcc2-4444-bd0c-e9db9f803cc8).2330400-92233720368547758083403Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5204352n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3411859202-1244088603-3680385673-249963387210/19/2021 1:26:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CB5CD702-491B-4A27-893A-5EDBD062FD94--986BE93E-73AA-4F04-85A2-F8DEB093168F successfully disconnected from port .2340400-92233720368547758083402Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5204352n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3411859202-1244088603-3680385673-249963387210/19/2021 1:26:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC CB5CD702-491B-4A27-893A-5EDBD062FD94--986BE93E-73AA-4F04-85A2-F8DEB093168F (Friendly Name: e80d3a03-bcc2-4444-bd0c-e9db9f803cc8) successfully connected to port 106C9385-8094-4F5A-B8D1-2295611B35BE (Friendly Name: e80d3a03-bcc2-4444-bd0c-e9db9f803cc8) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083401Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5203468n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3411859202-1244088603-3680385673-249963387210/19/2021 1:26:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic CB5CD702-491B-4A27-893A-5EDBD062FD94--986BE93E-73AA-4F04-85A2-F8DEB093168F (Friendly Name: ).2330400-92233720368547758083400Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5203468n-h1-789963-20.cbci-789963-20.local10/19/2021 1:26:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403399Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8003188n-h1-789963-20.cbci-789963-20.local10/19/2021 1:26:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the running state.7036016384400-91873432398358118403398Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8003188n-h1-789963-20.cbci-789963-20.local10/19/2021 1:26:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403397Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:26:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118403396Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800900n-h1-789963-20.cbci-789963-20.local10/19/2021 1:26:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3AA10C42-DF84-486B-9A04-D39432B072F1--7E394875-F00C-4A2A-9D58-17C19673F2F5 (Friendly Name: 7b37720f-f010-4146-b255-6c50e7d83eaa).2330400-92233720368547758083395Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10041476n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-983632962-1215029124-2496857242-405082526610/19/2021 1:25:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3AA10C42-DF84-486B-9A04-D39432B072F1--7E394875-F00C-4A2A-9D58-17C19673F2F5 successfully disconnected from port .2340400-92233720368547758083394Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10041476n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-983632962-1215029124-2496857242-405082526610/19/2021 1:25:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic AC07614A-9D67-4153-91EB-0AF5FBB8749A--C70C3ED4-6B0B-4251-9DAC-7A8F02F4EA1A (Friendly Name: c5a02bfc-b246-4131-b192-ff5454dea0b8).2330400-92233720368547758083393Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20604736n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2886164810-1095998823-4111133585-259134079510/19/2021 1:25:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AC07614A-9D67-4153-91EB-0AF5FBB8749A--C70C3ED4-6B0B-4251-9DAC-7A8F02F4EA1A successfully disconnected from port .2340400-92233720368547758083392Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20604736n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2886164810-1095998823-4111133585-259134079510/19/2021 1:25:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3CA82D6F-6500-4562-9240-C19BED4AC8CA--55AE9189-296E-46ED-9885-5767D12ED1FC (Friendly Name: d3bb2bba-f667-41f5-9b86-489126c8740c) successfully connected to port E5971EB4-871F-44EC-B057-8F384E84DB4D (Friendly Name: d3bb2bba-f667-41f5-9b86-489126c8740c) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083391Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43364676n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1017654639-1164076288-2613133458-340212401310/19/2021 1:25:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3CA82D6F-6500-4562-9240-C19BED4AC8CA--55AE9189-296E-46ED-9885-5767D12ED1FC (Friendly Name: ).2330400-92233720368547758083390Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43364676n-h1-789963-20.cbci-789963-20.local10/19/2021 1:25:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 9A133B1D-F1BF-4881-B553-2654F67181D0--D071089A-0FFF-43D9-A0EC-1C00213C632E (Friendly Name: b62fc743-df0f-4552-8a97-bee822cc7df2).2330400-92233720368547758083389Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31363924n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2584951581-1216475583-1411797941-349814424610/19/2021 1:25:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9A133B1D-F1BF-4881-B553-2654F67181D0--D071089A-0FFF-43D9-A0EC-1C00213C632E successfully disconnected from port .2340400-92233720368547758083388Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31363924n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2584951581-1216475583-1411797941-349814424610/19/2021 1:25:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B8D8C395-70BE-41A3-82E6-BA7027BB33B8--1ABCA1B2-CB4E-43BE-8C5C-27A03764050D (Friendly Name: 86c35ec1-7261-428d-9fe2-481078f5a422).2330400-92233720368547758083387Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39124244n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3101213589-1101230270-1891296898-309039799110/19/2021 1:25:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B8D8C395-70BE-41A3-82E6-BA7027BB33B8--1ABCA1B2-CB4E-43BE-8C5C-27A03764050D successfully disconnected from port .2340400-92233720368547758083386Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39124244n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3101213589-1101230270-1891296898-309039799110/19/2021 1:25:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 9A133B1D-F1BF-4881-B553-2654F67181D0--D071089A-0FFF-43D9-A0EC-1C00213C632E (Friendly Name: b62fc743-df0f-4552-8a97-bee822cc7df2) successfully connected to port 426472B4-F917-4210-BD52-8AEDBA76682B (Friendly Name: b62fc743-df0f-4552-8a97-bee822cc7df2) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083385Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31363244n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2584951581-1216475583-1411797941-349814424610/19/2021 1:25:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 9A133B1D-F1BF-4881-B553-2654F67181D0--D071089A-0FFF-43D9-A0EC-1C00213C632E (Friendly Name: ).2330400-92233720368547758083384Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31363244n-h1-789963-20.cbci-789963-20.local10/19/2021 1:25:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F1AD48C4-3DCA-4786-87C4-EC3F86134506--D04F432F-60CB-48C1-A04F-A5B3A3997A98 (Friendly Name: 50530f99-7b5e-4ea1-a115-bcd7ad6d0d0d).2330400-92233720368547758083383Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35043344n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4054665412-1199979978-1072481415-10519027810/19/2021 1:25:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F1AD48C4-3DCA-4786-87C4-EC3F86134506--D04F432F-60CB-48C1-A04F-A5B3A3997A98 successfully disconnected from port .2340400-92233720368547758083382Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35043344n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4054665412-1199979978-1072481415-10519027810/19/2021 1:25:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F1AD48C4-3DCA-4786-87C4-EC3F86134506--D04F432F-60CB-48C1-A04F-A5B3A3997A98 (Friendly Name: 50530f99-7b5e-4ea1-a115-bcd7ad6d0d0d) successfully connected to port 8EB1BE5F-DDD8-4C76-BB07-DF54C6CEC6DE (Friendly Name: 50530f99-7b5e-4ea1-a115-bcd7ad6d0d0d) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083381Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35043344n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4054665412-1199979978-1072481415-10519027810/19/2021 1:24:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F1AD48C4-3DCA-4786-87C4-EC3F86134506--D04F432F-60CB-48C1-A04F-A5B3A3997A98 (Friendly Name: ).2330400-92233720368547758083380Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem35043344n-h1-789963-20.cbci-789963-20.local10/19/2021 1:24:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D043F893-34FD-4260-BFFE-221727D5623F--1246613B-D9DB-4464-80EC-6338F6EB7D21 (Friendly Name: 51ff66ed-5ab6-489d-999f-a3e41c7d11d8).2330400-92233720368547758083379Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43684792n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3494115475-1113601277-388169407-106344170310/19/2021 1:24:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D043F893-34FD-4260-BFFE-221727D5623F--1246613B-D9DB-4464-80EC-6338F6EB7D21 successfully disconnected from port .2340400-92233720368547758083378Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43684792n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3494115475-1113601277-388169407-106344170310/19/2021 1:24:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC AC07614A-9D67-4153-91EB-0AF5FBB8749A--C70C3ED4-6B0B-4251-9DAC-7A8F02F4EA1A (Friendly Name: c5a02bfc-b246-4131-b192-ff5454dea0b8) successfully connected to port 95F337FD-E208-4E29-94DB-FDECCAB19DD6 (Friendly Name: c5a02bfc-b246-4131-b192-ff5454dea0b8) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083377Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2060944n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2886164810-1095998823-4111133585-259134079510/19/2021 1:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic AC07614A-9D67-4153-91EB-0AF5FBB8749A--C70C3ED4-6B0B-4251-9DAC-7A8F02F4EA1A (Friendly Name: ).2330400-92233720368547758083376Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem2060944n-h1-789963-20.cbci-789963-20.local10/19/2021 1:24:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403375Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:24:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D043F893-34FD-4260-BFFE-221727D5623F--1246613B-D9DB-4464-80EC-6338F6EB7D21 (Friendly Name: 51ff66ed-5ab6-489d-999f-a3e41c7d11d8) successfully connected to port 385F4274-720B-4403-95BF-9D3AF225FA15 (Friendly Name: 51ff66ed-5ab6-489d-999f-a3e41c7d11d8) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083374Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43684744n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3494115475-1113601277-388169407-106344170310/19/2021 1:24:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D043F893-34FD-4260-BFFE-221727D5623F--1246613B-D9DB-4464-80EC-6338F6EB7D21 (Friendly Name: ).2330400-92233720368547758083373Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43684744n-h1-789963-20.cbci-789963-20.local10/19/2021 1:24:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D043F893-34FD-4260-BFFE-221727D5623F--1246613B-D9DB-4464-80EC-6338F6EB7D21 (Friendly Name: 51ff66ed-5ab6-489d-999f-a3e41c7d11d8).2330400-92233720368547758083372Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3212812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3494115475-1113601277-388169407-106344170310/19/2021 1:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D043F893-34FD-4260-BFFE-221727D5623F--1246613B-D9DB-4464-80EC-6338F6EB7D21 successfully disconnected from port .2340400-92233720368547758083371Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3212812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3494115475-1113601277-388169407-106344170310/19/2021 1:24:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D043F893-34FD-4260-BFFE-221727D5623F--1246613B-D9DB-4464-80EC-6338F6EB7D21 (Friendly Name: 51ff66ed-5ab6-489d-999f-a3e41c7d11d8) successfully connected to port 385F4274-720B-4403-95BF-9D3AF225FA15 (Friendly Name: 51ff66ed-5ab6-489d-999f-a3e41c7d11d8) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083370Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3212812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3494115475-1113601277-388169407-106344170310/19/2021 1:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D043F893-34FD-4260-BFFE-221727D5623F--1246613B-D9DB-4464-80EC-6338F6EB7D21 (Friendly Name: ).2330400-92233720368547758083369Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem3212812n-h1-789963-20.cbci-789963-20.local10/19/2021 1:24:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3AA10C42-DF84-486B-9A04-D39432B072F1--7E394875-F00C-4A2A-9D58-17C19673F2F5 (Friendly Name: 7b37720f-f010-4146-b255-6c50e7d83eaa) successfully connected to port D3B4C08C-8ED9-4136-97B0-66BC214A30AF (Friendly Name: 7b37720f-f010-4146-b255-6c50e7d83eaa) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083368Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10041640n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-983632962-1215029124-2496857242-405082526610/19/2021 1:24:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3AA10C42-DF84-486B-9A04-D39432B072F1--7E394875-F00C-4A2A-9D58-17C19673F2F5 (Friendly Name: ).2330400-92233720368547758083367Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10041640n-h1-789963-20.cbci-789963-20.local10/19/2021 1:24:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D5FEE0F1-E8DC-4A57-BFDC-653C92C6810C--728E8AD9-965B-4A84-89E8-D8255E8A01E8 (Friendly Name: a6702058-ead9-48a9-85d5-8351fbf22bff).2330400-92233720368547758083366Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24841372n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3590250737-1247275228-1013308607-20983157010/19/2021 1:23:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D5FEE0F1-E8DC-4A57-BFDC-653C92C6810C--728E8AD9-965B-4A84-89E8-D8255E8A01E8 successfully disconnected from port .2340400-92233720368547758083365Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24841372n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3590250737-1247275228-1013308607-20983157010/19/2021 1:23:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E0872A92-D5CE-43C6-9DDD-7BFDFE3D165C--4EEE4CF3-8DDF-4A17-88D4-76D883AF5647 (Friendly Name: b298c369-e1d8-4f5e-ab61-e29cb504b560).2330400-92233720368547758083364Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4152580n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3766954642-1137104334-4252753309-154496153410/19/2021 1:23:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E0872A92-D5CE-43C6-9DDD-7BFDFE3D165C--4EEE4CF3-8DDF-4A17-88D4-76D883AF5647 successfully disconnected from port .2340400-92233720368547758083363Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4152580n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3766954642-1137104334-4252753309-154496153410/19/2021 1:23:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D5FEE0F1-E8DC-4A57-BFDC-653C92C6810C--728E8AD9-965B-4A84-89E8-D8255E8A01E8 (Friendly Name: a6702058-ead9-48a9-85d5-8351fbf22bff) successfully connected to port C9B02D97-1C67-447D-83DD-54E6077B212D (Friendly Name: a6702058-ead9-48a9-85d5-8351fbf22bff) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083362Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24841148n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3590250737-1247275228-1013308607-20983157010/19/2021 1:23:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D5FEE0F1-E8DC-4A57-BFDC-653C92C6810C--728E8AD9-965B-4A84-89E8-D8255E8A01E8 (Friendly Name: ).2330400-92233720368547758083361Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24841148n-h1-789963-20.cbci-789963-20.local10/19/2021 1:23:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403360Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800900n-h1-789963-20.cbci-789963-20.local10/19/2021 1:23:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 40518892-AF8E-42EF-897A-21DB72348C96--347A073A-ECA2-4CCD-BFDB-3C060DE3ED88 (Friendly Name: b0efcc5d-168f-4d15-a929-dc50f81922c8).2330400-92233720368547758083359Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43162824n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1079085202-1123004302-3676404361-252577086610/19/2021 1:23:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 40518892-AF8E-42EF-897A-21DB72348C96--347A073A-ECA2-4CCD-BFDB-3C060DE3ED88 successfully disconnected from port .2340400-92233720368547758083358Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43162824n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1079085202-1123004302-3676404361-252577086610/19/2021 1:23:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C0140076-4F49-49A1-8B28-D7823FABB1B9--9610C4D3-8226-4AA1-8245-29D74F03F534 (Friendly Name: c08a9eb6-fb36-467f-83d2-5c73d50e8497).2330400-92233720368547758083357Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33602064n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3222536310-1235308361-2195138699-311542867110/19/2021 1:23:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C0140076-4F49-49A1-8B28-D7823FABB1B9--9610C4D3-8226-4AA1-8245-29D74F03F534 successfully disconnected from port .2340400-92233720368547758083356Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33602064n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3222536310-1235308361-2195138699-311542867110/19/2021 1:23:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 40518892-AF8E-42EF-897A-21DB72348C96--347A073A-ECA2-4CCD-BFDB-3C060DE3ED88 (Friendly Name: b0efcc5d-168f-4d15-a929-dc50f81922c8) successfully connected to port AE97BF58-89D6-43EA-BC23-ED4929E492B0 (Friendly Name: b0efcc5d-168f-4d15-a929-dc50f81922c8) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083355Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43163836n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1079085202-1123004302-3676404361-252577086610/19/2021 1:22:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 40518892-AF8E-42EF-897A-21DB72348C96--347A073A-ECA2-4CCD-BFDB-3C060DE3ED88 (Friendly Name: ).2330400-92233720368547758083354Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43163836n-h1-789963-20.cbci-789963-20.local10/19/2021 1:22:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B8D8C395-70BE-41A3-82E6-BA7027BB33B8--1ABCA1B2-CB4E-43BE-8C5C-27A03764050D (Friendly Name: 86c35ec1-7261-428d-9fe2-481078f5a422) successfully connected to port F0D74B59-4808-45C7-A85E-C22F08245229 (Friendly Name: 86c35ec1-7261-428d-9fe2-481078f5a422) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083353Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39122364n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3101213589-1101230270-1891296898-309039799110/19/2021 1:22:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B8D8C395-70BE-41A3-82E6-BA7027BB33B8--1ABCA1B2-CB4E-43BE-8C5C-27A03764050D (Friendly Name: ).2330400-92233720368547758083352Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem39122364n-h1-789963-20.cbci-789963-20.local10/19/2021 1:22:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403351Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:22:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C0140076-4F49-49A1-8B28-D7823FABB1B9--9610C4D3-8226-4AA1-8245-29D74F03F534 (Friendly Name: c08a9eb6-fb36-467f-83d2-5c73d50e8497) successfully connected to port A6FEE948-D0B3-475B-810B-D36CB27D84EE (Friendly Name: c08a9eb6-fb36-467f-83d2-5c73d50e8497) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083350Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33602152n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3222536310-1235308361-2195138699-311542867110/19/2021 1:22:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C0140076-4F49-49A1-8B28-D7823FABB1B9--9610C4D3-8226-4AA1-8245-29D74F03F534 (Friendly Name: ).2330400-92233720368547758083349Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33602152n-h1-789963-20.cbci-789963-20.local10/19/2021 1:22:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic FA632108-994C-4FE9-995A-5AC744EF54AA--A9A6C6FF-061A-47D1-9845-DCCAFA31CFB4 (Friendly Name: ed684672-13e3-47f3-a737-69cd823a1175).2330400-92233720368547758083348Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10523252n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4200800520-1340709196-3344587417-285769299610/19/2021 1:22:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FA632108-994C-4FE9-995A-5AC744EF54AA--A9A6C6FF-061A-47D1-9845-DCCAFA31CFB4 successfully disconnected from port .2340400-92233720368547758083347Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10523252n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4200800520-1340709196-3344587417-285769299610/19/2021 1:22:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic EC281F72-A47B-415D-81C1-D845479E3E03--6431489A-4F4E-4E35-A562-B32AB2BA0F25 (Friendly Name: eb9405b9-3517-4f50-87dd-6735fa10ed04).2330400-92233720368547758083346Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20684328n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3962052466-1096655995-1171833217-5443539910/19/2021 1:22:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EC281F72-A47B-415D-81C1-D845479E3E03--6431489A-4F4E-4E35-A562-B32AB2BA0F25 successfully disconnected from port .2340400-92233720368547758083345Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20684328n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3962052466-1096655995-1171833217-5443539910/19/2021 1:22:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 07B7EBB2-1A93-4943-8E6A-CB0B6DA1BB1D--1443E82C-BE5F-4926-88FA-81BB3D695318 (Friendly Name: 2a756082-0af2-48bf-a96f-d993c8075747).2330400-92233720368547758083344Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44162712n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-129493938-1229134483-197880462-49883582110/19/2021 1:21:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 07B7EBB2-1A93-4943-8E6A-CB0B6DA1BB1D--1443E82C-BE5F-4926-88FA-81BB3D695318 successfully disconnected from port .2340400-92233720368547758083343Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44162712n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-129493938-1229134483-197880462-49883582110/19/2021 1:21:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 07B7EBB2-1A93-4943-8E6A-CB0B6DA1BB1D--1443E82C-BE5F-4926-88FA-81BB3D695318 (Friendly Name: 2a756082-0af2-48bf-a96f-d993c8075747) successfully connected to port 78AAC41C-148A-40D0-A09B-0273031A41EF (Friendly Name: 2a756082-0af2-48bf-a96f-d993c8075747) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083342Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44162428n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-129493938-1229134483-197880462-49883582110/19/2021 1:21:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 07B7EBB2-1A93-4943-8E6A-CB0B6DA1BB1D--1443E82C-BE5F-4926-88FA-81BB3D695318 (Friendly Name: ).2330400-92233720368547758083341Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44162428n-h1-789963-20.cbci-789963-20.local10/19/2021 1:21:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC EC281F72-A47B-415D-81C1-D845479E3E03--6431489A-4F4E-4E35-A562-B32AB2BA0F25 (Friendly Name: eb9405b9-3517-4f50-87dd-6735fa10ed04) successfully connected to port 7E5F8300-A3FA-4BFC-A7EA-C9C853035AA4 (Friendly Name: eb9405b9-3517-4f50-87dd-6735fa10ed04) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083340Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20682344n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3962052466-1096655995-1171833217-5443539910/19/2021 1:21:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic EC281F72-A47B-415D-81C1-D845479E3E03--6431489A-4F4E-4E35-A562-B32AB2BA0F25 (Friendly Name: ).2330400-92233720368547758083339Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20682344n-h1-789963-20.cbci-789963-20.local10/19/2021 1:21:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E0872A92-D5CE-43C6-9DDD-7BFDFE3D165C--4EEE4CF3-8DDF-4A17-88D4-76D883AF5647 (Friendly Name: b298c369-e1d8-4f5e-ab61-e29cb504b560) successfully connected to port 0B1E806D-3B20-4F2F-9557-F0F17262620B (Friendly Name: b298c369-e1d8-4f5e-ab61-e29cb504b560) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083338Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41524200n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3766954642-1137104334-4252753309-154496153410/19/2021 1:21:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E0872A92-D5CE-43C6-9DDD-7BFDFE3D165C--4EEE4CF3-8DDF-4A17-88D4-76D883AF5647 (Friendly Name: ).2330400-92233720368547758083337Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41524200n-h1-789963-20.cbci-789963-20.local10/19/2021 1:21:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 731233D6-E6D5-4EC6-901D-DCCAEAFA086E--3289DAB0-E056-4493-B4B8-3EC8BEA09F6C (Friendly Name: f6de6c27-e56e-4ee7-be21-8a38cf3f6a4e).2330400-92233720368547758083336Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48241432n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1930572758-1321658069-3403423120-184608228210/19/2021 1:21:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 731233D6-E6D5-4EC6-901D-DCCAEAFA086E--3289DAB0-E056-4493-B4B8-3EC8BEA09F6C successfully disconnected from port .2340400-92233720368547758083335Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48241432n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1930572758-1321658069-3403423120-184608228210/19/2021 1:21:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B4A80FA4-F456-4AE5-BB0F-FDEDAE350F6F--D667A0F0-32F9-4E76-80D7-F9587E7F1758 (Friendly Name: f820d52c-5d4e-4b92-845e-4d8af0999a77).2330400-92233720368547758083334Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50482744n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3030912932-1256584278-3992784827-186326775810/19/2021 1:21:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B4A80FA4-F456-4AE5-BB0F-FDEDAE350F6F--D667A0F0-32F9-4E76-80D7-F9587E7F1758 successfully disconnected from port .2340400-92233720368547758083333Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50482744n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3030912932-1256584278-3992784827-186326775810/19/2021 1:21:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 731233D6-E6D5-4EC6-901D-DCCAEAFA086E--3289DAB0-E056-4493-B4B8-3EC8BEA09F6C (Friendly Name: f6de6c27-e56e-4ee7-be21-8a38cf3f6a4e) successfully connected to port C5E4BE10-D9F2-47A6-B2A4-072F40D5AB6D (Friendly Name: f6de6c27-e56e-4ee7-be21-8a38cf3f6a4e) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083332Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48242752n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1930572758-1321658069-3403423120-184608228210/19/2021 1:21:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 731233D6-E6D5-4EC6-901D-DCCAEAFA086E--3289DAB0-E056-4493-B4B8-3EC8BEA09F6C (Friendly Name: ).2330400-92233720368547758083331Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48242752n-h1-789963-20.cbci-789963-20.local10/19/2021 1:21:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B4A80FA4-F456-4AE5-BB0F-FDEDAE350F6F--D667A0F0-32F9-4E76-80D7-F9587E7F1758 (Friendly Name: f820d52c-5d4e-4b92-845e-4d8af0999a77) successfully connected to port 32606BD8-5227-4A3B-A81B-7C4D39543666 (Friendly Name: f820d52c-5d4e-4b92-845e-4d8af0999a77) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083330Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50484240n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3030912932-1256584278-3992784827-186326775810/19/2021 1:21:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B4A80FA4-F456-4AE5-BB0F-FDEDAE350F6F--D667A0F0-32F9-4E76-80D7-F9587E7F1758 (Friendly Name: ).2330400-92233720368547758083329Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50484240n-h1-789963-20.cbci-789963-20.local10/19/2021 1:21:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5BFB6B4E-1248-4B29-9A9A-D5D9B73CBCB0--67DEA803-BE21-4129-AA56-7A4685B792BF (Friendly Name: b2b06471-a45d-44fa-9b6f-0faeca51695f).2330400-92233720368547758083328Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem411696n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1543203662-1260982856-3654654618-296512632710/19/2021 1:21:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5BFB6B4E-1248-4B29-9A9A-D5D9B73CBCB0--67DEA803-BE21-4129-AA56-7A4685B792BF successfully disconnected from port .2340400-92233720368547758083327Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem411696n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1543203662-1260982856-3654654618-296512632710/19/2021 1:21:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 76E64FD1-25E5-42A3-98F4-8F6D7E1A4D9D--ECC1E03E-FB70-4C44-8D8B-33348AD87E9D (Friendly Name: 8417ba89-2d85-4568-b6e2-60d58c4c088b).2330400-92233720368547758083326Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44882580n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1994805201-1117988325-1838150808-263907596610/19/2021 1:20:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 76E64FD1-25E5-42A3-98F4-8F6D7E1A4D9D--ECC1E03E-FB70-4C44-8D8B-33348AD87E9D successfully disconnected from port .2340400-92233720368547758083325Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44882580n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1994805201-1117988325-1838150808-263907596610/19/2021 1:20:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403324Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:20:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-9B-FB-00 has moved from port D29B6748-0E63-46D0-9911-412A9C1D9747 (Friendly Name: br-data_External) to port 749B8E11-2E53-4F4A-B4B4-CFC9C55AAF47 (Friendly Name: b2b06471-a45d-44fa-9b6f-0faeca51695f).250410180-92233720368547758083323Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41163108n-h1-789963-20.cbci-789963-20.local10/19/2021 1:20:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5BFB6B4E-1248-4B29-9A9A-D5D9B73CBCB0--67DEA803-BE21-4129-AA56-7A4685B792BF (Friendly Name: b2b06471-a45d-44fa-9b6f-0faeca51695f) successfully connected to port 749B8E11-2E53-4F4A-B4B4-CFC9C55AAF47 (Friendly Name: b2b06471-a45d-44fa-9b6f-0faeca51695f) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083322Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41164168n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1543203662-1260982856-3654654618-296512632710/19/2021 1:20:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5BFB6B4E-1248-4B29-9A9A-D5D9B73CBCB0--67DEA803-BE21-4129-AA56-7A4685B792BF (Friendly Name: ).2330400-92233720368547758083321Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41164168n-h1-789963-20.cbci-789963-20.local10/19/2021 1:20:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403320Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:20:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403319Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.local10/19/2021 1:20:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C7A4CEBD-E6C5-45C3-A654-FA7F2420EADF--1F5871CB-2AF5-49E4-A4E6-83FD354D03C3 (Friendly Name: fd671608-5237-431a-bb06-4b352edfd622).2330400-92233720368547758083318Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25722156n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3349466813-1170466501-2147112102-375666282010/19/2021 1:20:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C7A4CEBD-E6C5-45C3-A654-FA7F2420EADF--1F5871CB-2AF5-49E4-A4E6-83FD354D03C3 successfully disconnected from port .2340400-92233720368547758083317Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25722156n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3349466813-1170466501-2147112102-375666282010/19/2021 1:20:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 76E64FD1-25E5-42A3-98F4-8F6D7E1A4D9D--ECC1E03E-FB70-4C44-8D8B-33348AD87E9D (Friendly Name: 8417ba89-2d85-4568-b6e2-60d58c4c088b) successfully connected to port 8CA04AF9-F3AA-4E0D-A284-7E3601127AB1 (Friendly Name: 8417ba89-2d85-4568-b6e2-60d58c4c088b) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083316Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44882376n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1994805201-1117988325-1838150808-263907596610/19/2021 1:20:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 76E64FD1-25E5-42A3-98F4-8F6D7E1A4D9D--ECC1E03E-FB70-4C44-8D8B-33348AD87E9D (Friendly Name: ).2330400-92233720368547758083315Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem44882376n-h1-789963-20.cbci-789963-20.local10/19/2021 1:20:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6F1A135A-EC05-48DA-9715-8A3A14BF184D--BCBF220C-9391-4AC4-B826-BAD1F7B9FE9F (Friendly Name: e4b93860-eaa6-4cc4-a915-fcbf2bd9d2c7).2330400-92233720368547758083314Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30883340n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1863979866-1222306821-982128023-129346741210/19/2021 1:20:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6F1A135A-EC05-48DA-9715-8A3A14BF184D--BCBF220C-9391-4AC4-B826-BAD1F7B9FE9F successfully disconnected from port .2340400-92233720368547758083313Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30883340n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1863979866-1222306821-982128023-129346741210/19/2021 1:20:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C7A4CEBD-E6C5-45C3-A654-FA7F2420EADF--1F5871CB-2AF5-49E4-A4E6-83FD354D03C3 (Friendly Name: fd671608-5237-431a-bb06-4b352edfd622) successfully connected to port 4A37C9CD-9290-4ABB-90CA-48E02CE485DB (Friendly Name: fd671608-5237-431a-bb06-4b352edfd622) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083312Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25724376n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3349466813-1170466501-2147112102-375666282010/19/2021 1:20:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C7A4CEBD-E6C5-45C3-A654-FA7F2420EADF--1F5871CB-2AF5-49E4-A4E6-83FD354D03C3 (Friendly Name: ).2330400-92233720368547758083311Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25724376n-h1-789963-20.cbci-789963-20.local10/19/2021 1:20:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7B456E4A-E977-4E9D-BCC8-427BCC34713B--582CB1BA-3F7E-4095-A2E8-0DD9A722A423 (Friendly Name: e4230eb6-1b71-4ffa-a1ae-e33cfc638e7f).2330400-92233720368547758083310Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5683480n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2068147786-1318971767-2067974332-99727482810/19/2021 1:20:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7B456E4A-E977-4E9D-BCC8-427BCC34713B--582CB1BA-3F7E-4095-A2E8-0DD9A722A423 successfully disconnected from port .2340400-92233720368547758083309Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5683480n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2068147786-1318971767-2067974332-99727482810/19/2021 1:20:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7B456E4A-E977-4E9D-BCC8-427BCC34713B--582CB1BA-3F7E-4095-A2E8-0DD9A722A423 (Friendly Name: e4230eb6-1b71-4ffa-a1ae-e33cfc638e7f) successfully connected to port 6036FF4D-83A4-4A77-8F8D-DC7D78306604 (Friendly Name: e4230eb6-1b71-4ffa-a1ae-e33cfc638e7f) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083308Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5683480n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2068147786-1318971767-2067974332-99727482810/19/2021 1:20:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7B456E4A-E977-4E9D-BCC8-427BCC34713B--582CB1BA-3F7E-4095-A2E8-0DD9A722A423 (Friendly Name: ).2330400-92233720368547758083307Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5683480n-h1-789963-20.cbci-789963-20.local10/19/2021 1:20:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6F1A135A-EC05-48DA-9715-8A3A14BF184D--BCBF220C-9391-4AC4-B826-BAD1F7B9FE9F (Friendly Name: e4b93860-eaa6-4cc4-a915-fcbf2bd9d2c7) successfully connected to port 483116C5-990A-4D25-8069-4BED4FD4F07B (Friendly Name: e4b93860-eaa6-4cc4-a915-fcbf2bd9d2c7) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083306Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30883340n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1863979866-1222306821-982128023-129346741210/19/2021 1:20:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6F1A135A-EC05-48DA-9715-8A3A14BF184D--BCBF220C-9391-4AC4-B826-BAD1F7B9FE9F (Friendly Name: ).2330400-92233720368547758083305Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem30883340n-h1-789963-20.cbci-789963-20.local10/19/2021 1:20:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1F024E27-294B-4CB0-A467-4F1979E3256C--37018158-8B28-4120-9AAC-9B2336355FE9 (Friendly Name: 528c9c16-4189-4575-bbc3-fd7f60c1f62e).2330400-92233720368547758083304Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21244540n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-520244775-1286613323-424634276-181442239310/19/2021 1:19:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1F024E27-294B-4CB0-A467-4F1979E3256C--37018158-8B28-4120-9AAC-9B2336355FE9 successfully disconnected from port .2340400-92233720368547758083303Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21244540n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-520244775-1286613323-424634276-181442239310/19/2021 1:19:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic DF3A26EB-F54B-4577-8945-5CE6DBADC14F--B7B5D65A-EF18-48B6-B3C5-21100C6D07D5 (Friendly Name: 16848795-deda-4646-9f26-b42ba6a2f73e).2330400-92233720368547758083302Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem16364104n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3745130219-1165489483-3864806793-133809301910/19/2021 1:19:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DF3A26EB-F54B-4577-8945-5CE6DBADC14F--B7B5D65A-EF18-48B6-B3C5-21100C6D07D5 successfully disconnected from port .2340400-92233720368547758083301Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem16364104n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3745130219-1165489483-3864806793-133809301910/19/2021 1:19:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC DF3A26EB-F54B-4577-8945-5CE6DBADC14F--B7B5D65A-EF18-48B6-B3C5-21100C6D07D5 (Friendly Name: 16848795-deda-4646-9f26-b42ba6a2f73e) successfully connected to port A27CF67D-A16A-4057-B174-A4094F40EF5E (Friendly Name: 16848795-deda-4646-9f26-b42ba6a2f73e) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083300Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem16364400n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3745130219-1165489483-3864806793-133809301910/19/2021 1:19:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic DF3A26EB-F54B-4577-8945-5CE6DBADC14F--B7B5D65A-EF18-48B6-B3C5-21100C6D07D5 (Friendly Name: ).2330400-92233720368547758083299Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem16364400n-h1-789963-20.cbci-789963-20.local10/19/2021 1:19:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1F024E27-294B-4CB0-A467-4F1979E3256C--37018158-8B28-4120-9AAC-9B2336355FE9 (Friendly Name: 528c9c16-4189-4575-bbc3-fd7f60c1f62e) successfully connected to port E425174A-0AC2-4006-9B9F-C744B85B0AA3 (Friendly Name: 528c9c16-4189-4575-bbc3-fd7f60c1f62e) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083298Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21242964n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-520244775-1286613323-424634276-181442239310/19/2021 1:19:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1F024E27-294B-4CB0-A467-4F1979E3256C--37018158-8B28-4120-9AAC-9B2336355FE9 (Friendly Name: ).2330400-92233720368547758083297Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem21242964n-h1-789963-20.cbci-789963-20.local10/19/2021 1:19:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2895F98F-0DDF-491F-ADEB-3EE16B286744--77B033B8-A783-4AAE-BBC7-6F49BDCAB144 (Friendly Name: bf2b26e9-817c-495b-8306-5da4750c11c9).2330400-92233720368547758083296Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20803884n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-680917391-1226771935-3778997165-114761124310/19/2021 1:19:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2895F98F-0DDF-491F-ADEB-3EE16B286744--77B033B8-A783-4AAE-BBC7-6F49BDCAB144 successfully disconnected from port .2340400-92233720368547758083295Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20803884n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-680917391-1226771935-3778997165-114761124310/19/2021 1:19:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2895F98F-0DDF-491F-ADEB-3EE16B286744--77B033B8-A783-4AAE-BBC7-6F49BDCAB144 (Friendly Name: bf2b26e9-817c-495b-8306-5da4750c11c9) successfully connected to port 482D358C-530B-4561-9AE2-EB9D04CF410B (Friendly Name: bf2b26e9-817c-495b-8306-5da4750c11c9) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083294Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20804556n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-680917391-1226771935-3778997165-114761124310/19/2021 1:19:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2895F98F-0DDF-491F-ADEB-3EE16B286744--77B033B8-A783-4AAE-BBC7-6F49BDCAB144 (Friendly Name: ).2330400-92233720368547758083293Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20804556n-h1-789963-20.cbci-789963-20.local10/19/2021 1:19:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 40ECC944-5D8B-4402-BD88-C882C8F703D6--3696C69F-3519-413C-A623-CF7543236955 (Friendly Name: ac164844-b68a-43ae-8046-a1a1663b6f54).2330400-92233720368547758083292Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23802984n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1089259844-1141005707-2194180285-359058426410/19/2021 1:19:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 40ECC944-5D8B-4402-BD88-C882C8F703D6--3696C69F-3519-413C-A623-CF7543236955 successfully disconnected from port .2340400-92233720368547758083291Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23802984n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1089259844-1141005707-2194180285-359058426410/19/2021 1:19:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 5904B412-165C-4F33-8471-E7711B1F4A43--38586678-A278-4162-9079-6A1B0E5ADCF7 (Friendly Name: 56117721-da13-4722-a683-cc77505a7f3f).2330400-92233720368547758083290Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31124116n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1493480466-1328748124-1910993284-112893109910/19/2021 1:18:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5904B412-165C-4F33-8471-E7711B1F4A43--38586678-A278-4162-9079-6A1B0E5ADCF7 successfully disconnected from port .2340400-92233720368547758083289Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31124116n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1493480466-1328748124-1910993284-112893109910/19/2021 1:18:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 92B4CBDF-FA11-4062-8CB1-F31276FB9BC1--B3C23360-2700-447A-9121-F64AF53EB205 (Friendly Name: 49583b3b-bbbf-4500-ae21-5beaaeb479ad).2330400-92233720368547758083288Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42604304n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2461322207-1080228369-317960588-324822514210/19/2021 1:18:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 92B4CBDF-FA11-4062-8CB1-F31276FB9BC1--B3C23360-2700-447A-9121-F64AF53EB205 successfully disconnected from port .2340400-92233720368547758083287Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42604304n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2461322207-1080228369-317960588-324822514210/19/2021 1:18:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC FA632108-994C-4FE9-995A-5AC744EF54AA--A9A6C6FF-061A-47D1-9845-DCCAFA31CFB4 (Friendly Name: ed684672-13e3-47f3-a737-69cd823a1175) successfully connected to port 475F495B-C670-4043-A67B-423425EEC7AB (Friendly Name: ed684672-13e3-47f3-a737-69cd823a1175) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083286Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10523252n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4200800520-1340709196-3344587417-285769299610/19/2021 1:18:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic FA632108-994C-4FE9-995A-5AC744EF54AA--A9A6C6FF-061A-47D1-9845-DCCAFA31CFB4 (Friendly Name: ).2330400-92233720368547758083285Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10523252n-h1-789963-20.cbci-789963-20.local10/19/2021 1:18:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403284Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.local10/19/2021 1:18:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e).2330400-92233720368547758083283Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48124460n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:17:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA successfully disconnected from port .2340400-92233720368547758083282Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem48124460n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:17:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 92B4CBDF-FA11-4062-8CB1-F31276FB9BC1--B3C23360-2700-447A-9121-F64AF53EB205 (Friendly Name: 49583b3b-bbbf-4500-ae21-5beaaeb479ad) successfully connected to port CE4AFF7A-D05B-44D0-8615-036CFCF56B52 (Friendly Name: 49583b3b-bbbf-4500-ae21-5beaaeb479ad) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083281Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42604304n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2461322207-1080228369-317960588-324822514210/19/2021 1:17:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 92B4CBDF-FA11-4062-8CB1-F31276FB9BC1--B3C23360-2700-447A-9121-F64AF53EB205 (Friendly Name: ).2330400-92233720368547758083280Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem42604304n-h1-789963-20.cbci-789963-20.local10/19/2021 1:17:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D6F0227C-F963-4B72-BAEC-97046B4F416B--7C71D622-A70C-41E9-9367-0BC05006890D (Friendly Name: 3205b489-9337-4eba-b936-8a02f953b853).2330400-92233720368547758083279Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11481372n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3606061692-1265826147-77065402-179944228310/19/2021 1:17:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D6F0227C-F963-4B72-BAEC-97046B4F416B--7C71D622-A70C-41E9-9367-0BC05006890D successfully disconnected from port .2340400-92233720368547758083278Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11481372n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3606061692-1265826147-77065402-179944228310/19/2021 1:17:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2DA1F536-F1E5-4CEC-BF02-0A4F28AA53A0--E07E658E-4272-431F-98D1-33B520C91DC2 (Friendly Name: 631f033a-2782-40f9-9bd0-293f234cd9f8).2330400-92233720368547758083277Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28363344n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-765588790-1290596837-1326056127-268983760810/19/2021 1:17:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2DA1F536-F1E5-4CEC-BF02-0A4F28AA53A0--E07E658E-4272-431F-98D1-33B520C91DC2 successfully disconnected from port .2340400-92233720368547758083276Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28363344n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-765588790-1290596837-1326056127-268983760810/19/2021 1:17:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e) successfully connected to port 6FC5A097-6BEC-4C3D-8269-7581180D3C3C (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083275Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4812932n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:17:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: ).2330400-92233720368547758083274Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4812932n-h1-789963-20.cbci-789963-20.local10/19/2021 1:17:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e).2330400-92233720368547758083273Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12084048n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:17:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA successfully disconnected from port .2340400-92233720368547758083272Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12084048n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:17:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e) successfully connected to port 6FC5A097-6BEC-4C3D-8269-7581180D3C3C (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083271Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12083908n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:17:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: ).2330400-92233720368547758083270Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12083908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:17:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6D48137C-AD9D-4973-B829-1A09010514A3--A688DA6F-50A7-4B7F-9BB4-88ECD4E010CE (Friendly Name: e8bbe116-ad71-459a-8c4b-00e3641d2590).2330400-92233720368547758083269Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29882540n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1833440124-1232317853-152709560-273599820910/19/2021 1:17:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6D48137C-AD9D-4973-B829-1A09010514A3--A688DA6F-50A7-4B7F-9BB4-88ECD4E010CE successfully disconnected from port .2340400-92233720368547758083268Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29882540n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1833440124-1232317853-152709560-273599820910/19/2021 1:17:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2DA1F536-F1E5-4CEC-BF02-0A4F28AA53A0--E07E658E-4272-431F-98D1-33B520C91DC2 (Friendly Name: 631f033a-2782-40f9-9bd0-293f234cd9f8) successfully connected to port 1496CBFD-0A99-44FB-BCE1-FCE6E0E27252 (Friendly Name: 631f033a-2782-40f9-9bd0-293f234cd9f8) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083267Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28363344n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-765588790-1290596837-1326056127-268983760810/19/2021 1:17:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2DA1F536-F1E5-4CEC-BF02-0A4F28AA53A0--E07E658E-4272-431F-98D1-33B520C91DC2 (Friendly Name: ).2330400-92233720368547758083266Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem28363344n-h1-789963-20.cbci-789963-20.local10/19/2021 1:17:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403265Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001076n-h1-789963-20.cbci-789963-20.local10/19/2021 1:17:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e).2330400-92233720368547758083264Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5684340n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:16:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA successfully disconnected from port .2340400-92233720368547758083263Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5684340n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:16:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 5904B412-165C-4F33-8471-E7711B1F4A43--38586678-A278-4162-9079-6A1B0E5ADCF7 (Friendly Name: 56117721-da13-4722-a683-cc77505a7f3f) successfully connected to port C200F30E-EE06-4BF7-AAAD-2661B079CB65 (Friendly Name: 56117721-da13-4722-a683-cc77505a7f3f) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083262Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31125024n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1493480466-1328748124-1910993284-112893109910/19/2021 1:16:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 5904B412-165C-4F33-8471-E7711B1F4A43--38586678-A278-4162-9079-6A1B0E5ADCF7 (Friendly Name: ).2330400-92233720368547758083261Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31125024n-h1-789963-20.cbci-789963-20.local10/19/2021 1:16:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 40ECC944-5D8B-4402-BD88-C882C8F703D6--3696C69F-3519-413C-A623-CF7543236955 (Friendly Name: ac164844-b68a-43ae-8046-a1a1663b6f54) successfully connected to port C8385252-3D34-4DDC-8019-ACDC7345AB0F (Friendly Name: ac164844-b68a-43ae-8046-a1a1663b6f54) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083260Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23804180n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1089259844-1141005707-2194180285-359058426410/19/2021 1:16:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 40ECC944-5D8B-4402-BD88-C882C8F703D6--3696C69F-3519-413C-A623-CF7543236955 (Friendly Name: ).2330400-92233720368547758083259Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23804180n-h1-789963-20.cbci-789963-20.local10/19/2021 1:16:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118403258Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.local10/19/2021 1:16:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 142F991A-4E27-4A04-8B0A-A4D970BA46CE--02FD4EC4-154D-4249-B21D-0DA4A34DFC61 (Friendly Name: b369f2f2-e65d-4d01-82d2-89fe21310fda).2330400-92233720368547758083257Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27523064n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-338663706-1241796135-3651406475-346074174410/19/2021 1:16:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 142F991A-4E27-4A04-8B0A-A4D970BA46CE--02FD4EC4-154D-4249-B21D-0DA4A34DFC61 successfully disconnected from port .2340400-92233720368547758083256Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27523064n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-338663706-1241796135-3651406475-346074174410/19/2021 1:16:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D6F0227C-F963-4B72-BAEC-97046B4F416B--7C71D622-A70C-41E9-9367-0BC05006890D (Friendly Name: 3205b489-9337-4eba-b936-8a02f953b853) successfully connected to port F6A8692F-B531-41AD-ACDE-7EE9B20CA4C7 (Friendly Name: 3205b489-9337-4eba-b936-8a02f953b853) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083255Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11484464n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3606061692-1265826147-77065402-179944228310/19/2021 1:16:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D6F0227C-F963-4B72-BAEC-97046B4F416B--7C71D622-A70C-41E9-9367-0BC05006890D (Friendly Name: ).2330400-92233720368547758083254Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem11484464n-h1-789963-20.cbci-789963-20.local10/19/2021 1:16:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118403253Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001076n-h1-789963-20.cbci-789963-20.local10/19/2021 1:16:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Registry service entered the stopped state.7036016384400-91873432398358118403252Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001076n-h1-789963-20.cbci-789963-20.local10/19/2021 1:16:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 25BF3A34-D5E7-43E5-81D0-DDA39DDF232D--90BBDB45-F795-45D9-8F6D-897F139CCC54 (Friendly Name: 71d18a91-964e-4187-b4d2-6f30ca01a42d).2330400-92233720368547758083251Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50921880n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-633289268-1139135975-2749223041-75732572510/19/2021 1:16:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 25BF3A34-D5E7-43E5-81D0-DDA39DDF232D--90BBDB45-F795-45D9-8F6D-897F139CCC54 successfully disconnected from port .2340400-92233720368547758083250Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50921880n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-633289268-1139135975-2749223041-75732572510/19/2021 1:16:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 142F991A-4E27-4A04-8B0A-A4D970BA46CE--02FD4EC4-154D-4249-B21D-0DA4A34DFC61 (Friendly Name: b369f2f2-e65d-4d01-82d2-89fe21310fda) successfully connected to port 334115A4-056C-4259-961E-25CAC8C49456 (Friendly Name: b369f2f2-e65d-4d01-82d2-89fe21310fda) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083249Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27523372n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-338663706-1241796135-3651406475-346074174410/19/2021 1:16:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 142F991A-4E27-4A04-8B0A-A4D970BA46CE--02FD4EC4-154D-4249-B21D-0DA4A34DFC61 (Friendly Name: ).2330400-92233720368547758083248Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem27523372n-h1-789963-20.cbci-789963-20.local10/19/2021 1:16:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e) successfully connected to port 6FC5A097-6BEC-4C3D-8269-7581180D3C3C (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083247Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5683656n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:16:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: ).2330400-92233720368547758083246Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5683656n-h1-789963-20.cbci-789963-20.local10/19/2021 1:16:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6D48137C-AD9D-4973-B829-1A09010514A3--A688DA6F-50A7-4B7F-9BB4-88ECD4E010CE (Friendly Name: e8bbe116-ad71-459a-8c4b-00e3641d2590) successfully connected to port D2A7C3C2-169A-49D4-8086-E12535E8EC15 (Friendly Name: e8bbe116-ad71-459a-8c4b-00e3641d2590) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083245Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29882540n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1833440124-1232317853-152709560-273599820910/19/2021 1:16:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6D48137C-AD9D-4973-B829-1A09010514A3--A688DA6F-50A7-4B7F-9BB4-88ECD4E010CE (Friendly Name: ).2330400-92233720368547758083244Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29882540n-h1-789963-20.cbci-789963-20.local10/19/2021 1:16:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e).2330400-92233720368547758083243Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33444556n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:16:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA successfully disconnected from port .2340400-92233720368547758083242Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33444556n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:16:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e) successfully connected to port 6FC5A097-6BEC-4C3D-8269-7581180D3C3C (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083241Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33442924n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:16:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: ).2330400-92233720368547758083240Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33442924n-h1-789963-20.cbci-789963-20.local10/19/2021 1:16:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e).2330400-92233720368547758083239Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12644296n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:16:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA successfully disconnected from port .2340400-92233720368547758083238Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12644296n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:16:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 25BF3A34-D5E7-43E5-81D0-DDA39DDF232D--90BBDB45-F795-45D9-8F6D-897F139CCC54 (Friendly Name: 71d18a91-964e-4187-b4d2-6f30ca01a42d) successfully connected to port 0E6CA96A-33FB-4648-96CE-E6C5A0CB893C (Friendly Name: 71d18a91-964e-4187-b4d2-6f30ca01a42d) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083237Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50924108n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-633289268-1139135975-2749223041-75732572510/19/2021 1:16:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 25BF3A34-D5E7-43E5-81D0-DDA39DDF232D--90BBDB45-F795-45D9-8F6D-897F139CCC54 (Friendly Name: ).2330400-92233720368547758083236Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem50924108n-h1-789963-20.cbci-789963-20.local10/19/2021 1:16:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B42D94CB-95AE-4EDE-A89C-A4C264D031E2--59ED305F-D86E-42BD-AC77-267A0AF20906 (Friendly Name: b220811d-369f-46ac-8ec5-aff6a56a10fd).2330400-92233720368547758083235Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29844764n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3022886091-1323210158-3265567912-379491542810/19/2021 1:15:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B42D94CB-95AE-4EDE-A89C-A4C264D031E2--59ED305F-D86E-42BD-AC77-267A0AF20906 successfully disconnected from port .2340400-92233720368547758083234Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29844764n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3022886091-1323210158-3265567912-379491542810/19/2021 1:15:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B42D94CB-95AE-4EDE-A89C-A4C264D031E2--59ED305F-D86E-42BD-AC77-267A0AF20906 (Friendly Name: b220811d-369f-46ac-8ec5-aff6a56a10fd) successfully connected to port 5E36A38A-0432-4913-AAC2-EB1F61616BAF (Friendly Name: b220811d-369f-46ac-8ec5-aff6a56a10fd) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083233Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29844764n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3022886091-1323210158-3265567912-379491542810/19/2021 1:15:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B42D94CB-95AE-4EDE-A89C-A4C264D031E2--59ED305F-D86E-42BD-AC77-267A0AF20906 (Friendly Name: ).2330400-92233720368547758083232Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem29844764n-h1-789963-20.cbci-789963-20.local10/19/2021 1:15:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118403231Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001076n-h1-789963-20.cbci-789963-20.local10/19/2021 1:15:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118403230Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001076n-h1-789963-20.cbci-789963-20.local10/19/2021 1:15:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e) successfully connected to port 6FC5A097-6BEC-4C3D-8269-7581180D3C3C (Friendly Name: 5003bf41-8f04-41bf-9e16-ec3e1b54c10e) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083229Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12644356n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3591204178-1097036013-2462792850-53441376010/19/2021 1:15:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic D60D6D52-70ED-4163-923C-CB92C081DA1F--6FA07CCA-48E0-4F3A-83D5-4628A3BB50EA (Friendly Name: ).2330400-92233720368547758083228Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem12644356n-h1-789963-20.cbci-789963-20.local10/19/2021 1:15:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1AD3B62E-E5DA-4398-8979-492940D50845--6754BA00-7E07-48FD-A693-A2CAFDD6331E (Friendly Name: 288699e8-942e-417f-8fc0-6af2226e8c10).2330400-92233720368547758083227Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45401532n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-450082350-1134093786-692681097-115820678410/19/2021 1:15:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1AD3B62E-E5DA-4398-8979-492940D50845--6754BA00-7E07-48FD-A693-A2CAFDD6331E successfully disconnected from port .2340400-92233720368547758083226Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45401532n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-450082350-1134093786-692681097-115820678410/19/2021 1:15:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B7A6506F-5DFF-477D-A5E7-C877FA944A43--C4646261-6E64-494D-8D73-43A8EAF53A74 (Friendly Name: f43ff71b-9f25-4b96-a218-e1dcd0ffa6b3).2330400-92233720368547758083225Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45284388n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3081130095-1199398399-2009655205-112896127410/19/2021 1:15:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B7A6506F-5DFF-477D-A5E7-C877FA944A43--C4646261-6E64-494D-8D73-43A8EAF53A74 successfully disconnected from port .2340400-92233720368547758083224Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45284388n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3081130095-1199398399-2009655205-112896127410/19/2021 1:15:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic C2889898-2EEC-4AF3-A058-AA698273C101--E1DD5873-63FC-44F6-8148-425C0475D100 (Friendly Name: b766c02f-d025-4337-88e8-092e92a0e78b).2330400-92233720368547758083223Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24564328n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3263731864-1257451244-1772771488-2945523410/19/2021 1:15:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C2889898-2EEC-4AF3-A058-AA698273C101--E1DD5873-63FC-44F6-8148-425C0475D100 successfully disconnected from port .2340400-92233720368547758083222Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24564328n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3263731864-1257451244-1772771488-2945523410/19/2021 1:15:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 2650EFD0-495D-4D04-B5E8-8E16AF898936--27BEFA9E-7AA9-4271-9F05-DBC832BACDA5 (Friendly Name: 62c34b3b-a108-41f7-a17b-daace0d74d78).2330400-92233720368547758083221Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10524144n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-642838480-1292126557-378464437-91498334310/19/2021 1:15:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2650EFD0-495D-4D04-B5E8-8E16AF898936--27BEFA9E-7AA9-4271-9F05-DBC832BACDA5 successfully disconnected from port .2340400-92233720368547758083220Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10524144n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-642838480-1292126557-378464437-91498334310/19/2021 1:15:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-E1-A3-C9 has moved from port 2828C6D4-0160-4A44-BF00-F23ABBEB56C9 (Friendly Name: 62c34b3b-a108-41f7-a17b-daace0d74d78) to port 2828C6D4-0160-4A44-BF00-F23ABBEB56C9 (Friendly Name: 62c34b3b-a108-41f7-a17b-daace0d74d78).250410180-92233720368547758083219Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25084024n-h1-789963-20.cbci-789963-20.local10/19/2021 1:15:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 2650EFD0-495D-4D04-B5E8-8E16AF898936--27BEFA9E-7AA9-4271-9F05-DBC832BACDA5 (Friendly Name: 62c34b3b-a108-41f7-a17b-daace0d74d78) successfully connected to port 2828C6D4-0160-4A44-BF00-F23ABBEB56C9 (Friendly Name: 62c34b3b-a108-41f7-a17b-daace0d74d78) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083218Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10524144n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-642838480-1292126557-378464437-91498334310/19/2021 1:15:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 2650EFD0-495D-4D04-B5E8-8E16AF898936--27BEFA9E-7AA9-4271-9F05-DBC832BACDA5 (Friendly Name: ).2330400-92233720368547758083217Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10523932n-h1-789963-20.cbci-789963-20.local10/19/2021 1:15:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 59685953-9E87-4733-A6DE-959BDBBDD84C--902334C5-7D3C-4CB7-A28A-37585CC1ABA2 (Friendly Name: 4570f789-80b6-4b73-847a-c8940b30e8c1).2330400-92233720368547758083216Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31443480n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1500010835-1194565255-2610290342-128927279510/19/2021 1:15:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 59685953-9E87-4733-A6DE-959BDBBDD84C--902334C5-7D3C-4CB7-A28A-37585CC1ABA2 successfully disconnected from port .2340400-92233720368547758083215Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31443480n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1500010835-1194565255-2610290342-128927279510/19/2021 1:15:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 11CB5FD1-181B-4430-B360-D39DA6C17B40--D95C9A9A-8D48-4815-9917-E5C533D7622C (Friendly Name: 8b80ce54-4586-4a38-9b13-482f9cd11643).2330400-92233720368547758083214Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49004316n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-298541009-1144002587-2647875763-108185232610/19/2021 1:15:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 11CB5FD1-181B-4430-B360-D39DA6C17B40--D95C9A9A-8D48-4815-9917-E5C533D7622C successfully disconnected from port .2340400-92233720368547758083213Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49004316n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-298541009-1144002587-2647875763-108185232610/19/2021 1:15:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 05F63C81-39B2-4E27-AA21-FE7CCF3C0982--621EEAB2-F465-424B-9D2D-2A39C7A33152 (Friendly Name: 42452f8a-861b-4631-9705-d0d2d4f41d7d).2330400-92233720368547758083212Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41083664n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-100023425-1311193522-2097029546-218164347110/19/2021 1:14:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 05F63C81-39B2-4E27-AA21-FE7CCF3C0982--621EEAB2-F465-424B-9D2D-2A39C7A33152 successfully disconnected from port .2340400-92233720368547758083211Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41083664n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-100023425-1311193522-2097029546-218164347110/19/2021 1:14:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 11CB5FD1-181B-4430-B360-D39DA6C17B40--D95C9A9A-8D48-4815-9917-E5C533D7622C (Friendly Name: 8b80ce54-4586-4a38-9b13-482f9cd11643) successfully connected to port AB120419-594A-4294-8D1A-6CB3F71E0AB6 (Friendly Name: 8b80ce54-4586-4a38-9b13-482f9cd11643) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083210Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49004316n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-298541009-1144002587-2647875763-108185232610/19/2021 1:14:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 11CB5FD1-181B-4430-B360-D39DA6C17B40--D95C9A9A-8D48-4815-9917-E5C533D7622C (Friendly Name: ).2330400-92233720368547758083209Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem49004316n-h1-789963-20.cbci-789963-20.local10/19/2021 1:14:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403208Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001076n-h1-789963-20.cbci-789963-20.local10/19/2021 1:14:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from auto start to demand start.7040016384400-91873432398358118403207Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:14:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Windows Modules Installer service was changed from demand start to auto start.7040016384400-91873432398358118403206Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:14:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-E7-DF-2C has moved from port D29B6748-0E63-46D0-9911-412A9C1D9747 (Friendly Name: br-data_External) to port 8F21C789-D459-49E9-BE52-C97379384553 (Friendly Name: 4570f789-80b6-4b73-847a-c8940b30e8c1).250410180-92233720368547758083205Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41084120n-h1-789963-20.cbci-789963-20.local10/19/2021 1:14:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 59685953-9E87-4733-A6DE-959BDBBDD84C--902334C5-7D3C-4CB7-A28A-37585CC1ABA2 (Friendly Name: 4570f789-80b6-4b73-847a-c8940b30e8c1) successfully connected to port 8F21C789-D459-49E9-BE52-C97379384553 (Friendly Name: 4570f789-80b6-4b73-847a-c8940b30e8c1) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083204Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31443480n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1500010835-1194565255-2610290342-128927279510/19/2021 1:14:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 59685953-9E87-4733-A6DE-959BDBBDD84C--902334C5-7D3C-4CB7-A28A-37585CC1ABA2 (Friendly Name: ).2330400-92233720368547758083203Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31443480n-h1-789963-20.cbci-789963-20.local10/19/2021 1:14:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403202Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:14:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 114AB247-AC65-46A3-BB0A-8AE12EEBB5B1--48A148E1-11DA-4AA8-A2A6-F236C7EC82C4 (Friendly Name: e9da07d2-ee22-48c2-bd79-c8440a997db0).2330400-92233720368547758083201Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5364400n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-290107975-1185131621-3783920315-298148945410/19/2021 1:14:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 114AB247-AC65-46A3-BB0A-8AE12EEBB5B1--48A148E1-11DA-4AA8-A2A6-F236C7EC82C4 successfully disconnected from port .2340400-92233720368547758083200Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5364400n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-290107975-1185131621-3783920315-298148945410/19/2021 1:14:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B7A6506F-5DFF-477D-A5E7-C877FA944A43--C4646261-6E64-494D-8D73-43A8EAF53A74 (Friendly Name: f43ff71b-9f25-4b96-a218-e1dcd0ffa6b3) successfully connected to port 464E66E3-6AB7-456D-B01F-304871CEE963 (Friendly Name: f43ff71b-9f25-4b96-a218-e1dcd0ffa6b3) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083199Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45282076n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3081130095-1199398399-2009655205-112896127410/19/2021 1:14:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B7A6506F-5DFF-477D-A5E7-C877FA944A43--C4646261-6E64-494D-8D73-43A8EAF53A74 (Friendly Name: ).2330400-92233720368547758083198Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45282076n-h1-789963-20.cbci-789963-20.local10/19/2021 1:14:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403197Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:14:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 114AB247-AC65-46A3-BB0A-8AE12EEBB5B1--48A148E1-11DA-4AA8-A2A6-F236C7EC82C4 (Friendly Name: e9da07d2-ee22-48c2-bd79-c8440a997db0) successfully connected to port 51A73F23-1071-4F03-B0A1-3598217EAB95 (Friendly Name: e9da07d2-ee22-48c2-bd79-c8440a997db0) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083196Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5364548n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-290107975-1185131621-3783920315-298148945410/19/2021 1:14:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 114AB247-AC65-46A3-BB0A-8AE12EEBB5B1--48A148E1-11DA-4AA8-A2A6-F236C7EC82C4 (Friendly Name: ).2330400-92233720368547758083195Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5364548n-h1-789963-20.cbci-789963-20.local10/19/2021 1:14:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 114AB247-AC65-46A3-BB0A-8AE12EEBB5B1--48A148E1-11DA-4AA8-A2A6-F236C7EC82C4 (Friendly Name: e9da07d2-ee22-48c2-bd79-c8440a997db0).2330400-92233720368547758083194Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5364548n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-290107975-1185131621-3783920315-298148945410/19/2021 1:14:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 114AB247-AC65-46A3-BB0A-8AE12EEBB5B1--48A148E1-11DA-4AA8-A2A6-F236C7EC82C4 successfully disconnected from port .2340400-92233720368547758083193Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5364548n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-290107975-1185131621-3783920315-298148945410/19/2021 1:14:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 46278F64-AE9A-4350-BEF3-7F98DB716EDB--268C6681-2F51-4DB7-B4B3-8333BB42CDE6 (Friendly Name: 62c34b3b-a108-41f7-a17b-daace0d74d78).2330400-92233720368547758083192Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14401428n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1176997732-1129361050-2558522302-368144841110/19/2021 1:14:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 46278F64-AE9A-4350-BEF3-7F98DB716EDB--268C6681-2F51-4DB7-B4B3-8333BB42CDE6 successfully disconnected from port .2340400-92233720368547758083191Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14401428n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1176997732-1129361050-2558522302-368144841110/19/2021 1:14:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3B743888-B98B-4D44-AF5A-C64B28BE9687--26D58A04-09EE-4CE6-A967-B8B29813DA37 (Friendly Name: 4aee42ab-d4e9-48e6-8977-539591fdb426).2330400-92233720368547758083190Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43204924n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-997472392-1296349579-1271290543-227480324010/19/2021 1:14:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3B743888-B98B-4D44-AF5A-C64B28BE9687--26D58A04-09EE-4CE6-A967-B8B29813DA37 successfully disconnected from port .2340400-92233720368547758083189Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43204924n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-997472392-1296349579-1271290543-227480324010/19/2021 1:14:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3B743888-B98B-4D44-AF5A-C64B28BE9687--26D58A04-09EE-4CE6-A967-B8B29813DA37 (Friendly Name: 4aee42ab-d4e9-48e6-8977-539591fdb426) successfully connected to port A9687056-8A0D-4175-81FA-12689580FCD4 (Friendly Name: 4aee42ab-d4e9-48e6-8977-539591fdb426) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083188Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43203668n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-997472392-1296349579-1271290543-227480324010/19/2021 1:14:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3B743888-B98B-4D44-AF5A-C64B28BE9687--26D58A04-09EE-4CE6-A967-B8B29813DA37 (Friendly Name: ).2330400-92233720368547758083187Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem43203668n-h1-789963-20.cbci-789963-20.local10/19/2021 1:14:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 87A2F1EA-7629-4140-9E83-39D3661AC86E--DB2AD465-6047-4889-B5DE-44D86E1C8981 (Friendly Name: 4ba3b57a-2e2e-4842-b02d-2b02c048cc95).2330400-92233720368547758083186Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18803812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2275602922-1094743593-3543761822-185860771810/19/2021 1:14:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 87A2F1EA-7629-4140-9E83-39D3661AC86E--DB2AD465-6047-4889-B5DE-44D86E1C8981 successfully disconnected from port .2340400-92233720368547758083185Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18803812n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2275602922-1094743593-3543761822-185860771810/19/2021 1:14:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 114AB247-AC65-46A3-BB0A-8AE12EEBB5B1--48A148E1-11DA-4AA8-A2A6-F236C7EC82C4 (Friendly Name: e9da07d2-ee22-48c2-bd79-c8440a997db0) successfully connected to port 51A73F23-1071-4F03-B0A1-3598217EAB95 (Friendly Name: e9da07d2-ee22-48c2-bd79-c8440a997db0) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083184Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5364400n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-290107975-1185131621-3783920315-298148945410/19/2021 1:14:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 114AB247-AC65-46A3-BB0A-8AE12EEBB5B1--48A148E1-11DA-4AA8-A2A6-F236C7EC82C4 (Friendly Name: ).2330400-92233720368547758083183Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem5364400n-h1-789963-20.cbci-789963-20.local10/19/2021 1:14:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118403182Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:14:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403181Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:14:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 46278F64-AE9A-4350-BEF3-7F98DB716EDB--268C6681-2F51-4DB7-B4B3-8333BB42CDE6 (Friendly Name: 62c34b3b-a108-41f7-a17b-daace0d74d78) successfully connected to port 6FD0B9E4-B5C5-43E4-8B8D-24F1D7322680 (Friendly Name: 62c34b3b-a108-41f7-a17b-daace0d74d78) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083180Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14401536n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1176997732-1129361050-2558522302-368144841110/19/2021 1:14:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 46278F64-AE9A-4350-BEF3-7F98DB716EDB--268C6681-2F51-4DB7-B4B3-8333BB42CDE6 (Friendly Name: ).2330400-92233720368547758083179Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem14401536n-h1-789963-20.cbci-789963-20.local10/19/2021 1:14:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-9F-AF-53 has moved from port F93D9F42-5110-42CA-8CC2-CE825BB583B7 (Friendly Name: b766c02f-d025-4337-88e8-092e92a0e78b) to port F93D9F42-5110-42CA-8CC2-CE825BB583B7 (Friendly Name: b766c02f-d025-4337-88e8-092e92a0e78b).250410180-92233720368547758083178Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25082796n-h1-789963-20.cbci-789963-20.local10/19/2021 1:13:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC C2889898-2EEC-4AF3-A058-AA698273C101--E1DD5873-63FC-44F6-8148-425C0475D100 (Friendly Name: b766c02f-d025-4337-88e8-092e92a0e78b) successfully connected to port F93D9F42-5110-42CA-8CC2-CE825BB583B7 (Friendly Name: b766c02f-d025-4337-88e8-092e92a0e78b) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083177Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24564328n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3263731864-1257451244-1772771488-2945523410/19/2021 1:13:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic C2889898-2EEC-4AF3-A058-AA698273C101--E1DD5873-63FC-44F6-8148-425C0475D100 (Friendly Name: ).2330400-92233720368547758083176Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem24564552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:13:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 05F63C81-39B2-4E27-AA21-FE7CCF3C0982--621EEAB2-F465-424B-9D2D-2A39C7A33152 (Friendly Name: 42452f8a-861b-4631-9705-d0d2d4f41d7d) successfully connected to port 5801146A-A300-49A7-8146-D74B737077CD (Friendly Name: 42452f8a-861b-4631-9705-d0d2d4f41d7d) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083175Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41084616n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-100023425-1311193522-2097029546-218164347110/19/2021 1:13:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 05F63C81-39B2-4E27-AA21-FE7CCF3C0982--621EEAB2-F465-424B-9D2D-2A39C7A33152 (Friendly Name: ).2330400-92233720368547758083174Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41084616n-h1-789963-20.cbci-789963-20.local10/19/2021 1:13:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6AF4DE57-855C-4E3D-B276-DA0E1EDD7487--94545D7C-F798-4412-81FE-87547A4D83DE (Friendly Name: b766c02f-d025-4337-88e8-092e92a0e78b).2330400-92233720368547758083173Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31362824n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1794432599-1312654684-249198258-227258294210/19/2021 1:13:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6AF4DE57-855C-4E3D-B276-DA0E1EDD7487--94545D7C-F798-4412-81FE-87547A4D83DE successfully disconnected from port .2340400-92233720368547758083172Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31362824n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1794432599-1312654684-249198258-227258294210/19/2021 1:13:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-9F-AF-53 has moved from port 9B6984D0-551B-42C4-A584-F58D85E3AD02 (Friendly Name: b766c02f-d025-4337-88e8-092e92a0e78b) to port 9B6984D0-551B-42C4-A584-F58D85E3AD02 (Friendly Name: b766c02f-d025-4337-88e8-092e92a0e78b).250410180-92233720368547758083171Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25084024n-h1-789963-20.cbci-789963-20.local10/19/2021 1:13:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6AF4DE57-855C-4E3D-B276-DA0E1EDD7487--94545D7C-F798-4412-81FE-87547A4D83DE (Friendly Name: b766c02f-d025-4337-88e8-092e92a0e78b) successfully connected to port 9B6984D0-551B-42C4-A584-F58D85E3AD02 (Friendly Name: b766c02f-d025-4337-88e8-092e92a0e78b) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083170Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31362824n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1794432599-1312654684-249198258-227258294210/19/2021 1:13:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6AF4DE57-855C-4E3D-B276-DA0E1EDD7487--94545D7C-F798-4412-81FE-87547A4D83DE (Friendly Name: ).2330400-92233720368547758083169Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem31362824n-h1-789963-20.cbci-789963-20.local10/19/2021 1:13:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 87A2F1EA-7629-4140-9E83-39D3661AC86E--DB2AD465-6047-4889-B5DE-44D86E1C8981 (Friendly Name: 4ba3b57a-2e2e-4842-b02d-2b02c048cc95) successfully connected to port 957E4CCF-96E1-4423-AF70-7EFBF0E79307 (Friendly Name: 4ba3b57a-2e2e-4842-b02d-2b02c048cc95) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083168Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18804744n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2275602922-1094743593-3543761822-185860771810/19/2021 1:13:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 87A2F1EA-7629-4140-9E83-39D3661AC86E--DB2AD465-6047-4889-B5DE-44D86E1C8981 (Friendly Name: ).2330400-92233720368547758083167Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem18804744n-h1-789963-20.cbci-789963-20.local10/19/2021 1:13:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 68E68902-2656-4266-AAB6-D721E2CD944C--DE3CD9B5-F69D-4854-BF81-9A8CB5016F5D (Friendly Name: b766c02f-d025-4337-88e8-092e92a0e78b).2330400-92233720368547758083166Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26962708n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1759938818-1113990742-567785130-128482045010/19/2021 1:13:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 68E68902-2656-4266-AAB6-D721E2CD944C--DE3CD9B5-F69D-4854-BF81-9A8CB5016F5D successfully disconnected from port .2340400-92233720368547758083165Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26962708n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1759938818-1113990742-567785130-128482045010/19/2021 1:13:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 6A86E195-E756-4CD1-A6E4-6EA173477FAB--0FFE1105-C944-4D83-B14B-0EE559287CB4 (Friendly Name: b819d4d6-ec36-40e3-8921-d813a37b8606).2330400-92233720368547758083164Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47523112n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1787224469-1288824662-2708399270-287724529910/19/2021 1:13:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6A86E195-E756-4CD1-A6E4-6EA173477FAB--0FFE1105-C944-4D83-B14B-0EE559287CB4 successfully disconnected from port .2340400-92233720368547758083163Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47523112n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1787224469-1288824662-2708399270-287724529910/19/2021 1:13:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403162Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:13:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 68E68902-2656-4266-AAB6-D721E2CD944C--DE3CD9B5-F69D-4854-BF81-9A8CB5016F5D (Friendly Name: b766c02f-d025-4337-88e8-092e92a0e78b) successfully connected to port 49E00EA6-FB3E-403F-94F7-B8B10DBF71BE (Friendly Name: b766c02f-d025-4337-88e8-092e92a0e78b) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083161Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26962708n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1759938818-1113990742-567785130-128482045010/19/2021 1:12:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 68E68902-2656-4266-AAB6-D721E2CD944C--DE3CD9B5-F69D-4854-BF81-9A8CB5016F5D (Friendly Name: ).2330400-92233720368547758083160Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26962708n-h1-789963-20.cbci-789963-20.local10/19/2021 1:12:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 19A13E09-70D3-4A02-87FF-4E525FD201CF--3ECDE2B2-1067-464D-8C56-10C205A429E8 (Friendly Name: bd7b11bf-d3fd-44e2-87a0-6d060850f4fb).2330400-92233720368547758083159Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45482528n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-429997577-1241673939-1380908935-347300310310/19/2021 1:12:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 19A13E09-70D3-4A02-87FF-4E525FD201CF--3ECDE2B2-1067-464D-8C56-10C205A429E8 successfully disconnected from port .2340400-92233720368547758083158Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45482528n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-429997577-1241673939-1380908935-347300310310/19/2021 1:12:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 6A86E195-E756-4CD1-A6E4-6EA173477FAB--0FFE1105-C944-4D83-B14B-0EE559287CB4 (Friendly Name: b819d4d6-ec36-40e3-8921-d813a37b8606) successfully connected to port F97A19C1-D021-4EC0-A633-3F1E882905D4 (Friendly Name: b819d4d6-ec36-40e3-8921-d813a37b8606) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083157Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47523112n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1787224469-1288824662-2708399270-287724529910/19/2021 1:12:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 6A86E195-E756-4CD1-A6E4-6EA173477FAB--0FFE1105-C944-4D83-B14B-0EE559287CB4 (Friendly Name: ).2330400-92233720368547758083156Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47523112n-h1-789963-20.cbci-789963-20.local10/19/2021 1:12:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 60A0A043-EEAA-4D2C-94CB-48FA9A42CD02--A646ED60-0C8F-432A-AF80-C8862D0F1902 (Friendly Name: 4ae90d7f-a21c-470a-8123-4980ba735dba).2330400-92233720368547758083155Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47361536n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1621139523-1294790314-4199074708-4700636210/19/2021 1:12:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 60A0A043-EEAA-4D2C-94CB-48FA9A42CD02--A646ED60-0C8F-432A-AF80-C8862D0F1902 successfully disconnected from port .2340400-92233720368547758083154Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47361536n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1621139523-1294790314-4199074708-4700636210/19/2021 1:12:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 60A0A043-EEAA-4D2C-94CB-48FA9A42CD02--A646ED60-0C8F-432A-AF80-C8862D0F1902 (Friendly Name: 4ae90d7f-a21c-470a-8123-4980ba735dba) successfully connected to port 9628E63A-3AEE-449F-B988-602916F31193 (Friendly Name: 4ae90d7f-a21c-470a-8123-4980ba735dba) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083153Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47361428n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1621139523-1294790314-4199074708-4700636210/19/2021 1:12:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 60A0A043-EEAA-4D2C-94CB-48FA9A42CD02--A646ED60-0C8F-432A-AF80-C8862D0F1902 (Friendly Name: ).2330400-92233720368547758083152Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47361428n-h1-789963-20.cbci-789963-20.local10/19/2021 1:12:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MAC address FA-16-3E-44-D6-4B has moved from port A39AD47C-46E4-4B00-990B-BAFAF2029CDC (Friendly Name: 288699e8-942e-417f-8fc0-6af2226e8c10) to port A39AD47C-46E4-4B00-990B-BAFAF2029CDC (Friendly Name: 288699e8-942e-417f-8fc0-6af2226e8c10).250410180-92233720368547758083151Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem25083788n-h1-789963-20.cbci-789963-20.local10/19/2021 1:12:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7E8375C7-83C3-4405-AEE4-C1324E02FE27--AE01054C-7267-4B26-AE62-F2CF6AE99FF9 (Friendly Name: f983c135-fa15-44d6-bdd2-585543f1af33).2330400-92233720368547758083150Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47924552n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2122544583-1141212099-851567790-67095815810/19/2021 1:12:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7E8375C7-83C3-4405-AEE4-C1324E02FE27--AE01054C-7267-4B26-AE62-F2CF6AE99FF9 successfully disconnected from port .2340400-92233720368547758083149Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47924552n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2122544583-1141212099-851567790-67095815810/19/2021 1:12:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7E8375C7-83C3-4405-AEE4-C1324E02FE27--CC4D664C-BDD3-4408-A864-9106427FF670 (Friendly Name: fa068952-807f-48d9-8402-a753d8592ea5).2330400-92233720368547758083148Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47924552n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2122544583-1141212099-851567790-67095815810/19/2021 1:12:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7E8375C7-83C3-4405-AEE4-C1324E02FE27--CC4D664C-BDD3-4408-A864-9106427FF670 successfully disconnected from port .2340400-92233720368547758083147Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47924552n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2122544583-1141212099-851567790-67095815810/19/2021 1:12:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7E8375C7-83C3-4405-AEE4-C1324E02FE27--62D61C43-0573-4B6B-B42E-D3BCB3FFC60D (Friendly Name: a9f1b735-20cf-4757-932c-d646b5b4e23f).2330400-92233720368547758083146Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47924552n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2122544583-1141212099-851567790-67095815810/19/2021 1:12:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7E8375C7-83C3-4405-AEE4-C1324E02FE27--62D61C43-0573-4B6B-B42E-D3BCB3FFC60D successfully disconnected from port .2340400-92233720368547758083145Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47924552n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2122544583-1141212099-851567790-67095815810/19/2021 1:12:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Storage Spaces SMP service entered the running state.7036016384400-91873432398358118403144Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:12:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1AD3B62E-E5DA-4398-8979-492940D50845--6754BA00-7E07-48FD-A693-A2CAFDD6331E (Friendly Name: 288699e8-942e-417f-8fc0-6af2226e8c10) successfully connected to port A39AD47C-46E4-4B00-990B-BAFAF2029CDC (Friendly Name: 288699e8-942e-417f-8fc0-6af2226e8c10) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083143Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45404464n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-450082350-1134093786-692681097-115820678410/19/2021 1:12:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1AD3B62E-E5DA-4398-8979-492940D50845--6754BA00-7E07-48FD-A693-A2CAFDD6331E (Friendly Name: ).2330400-92233720368547758083142Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45404464n-h1-789963-20.cbci-789963-20.local10/19/2021 1:12:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7E8375C7-83C3-4405-AEE4-C1324E02FE27--62D61C43-0573-4B6B-B42E-D3BCB3FFC60D (Friendly Name: a9f1b735-20cf-4757-932c-d646b5b4e23f) successfully connected to port FA8ACC2C-8238-4932-B87F-C63BD03B309E (Friendly Name: a9f1b735-20cf-4757-932c-d646b5b4e23f) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083141Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47924552n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2122544583-1141212099-851567790-67095815810/19/2021 1:12:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7E8375C7-83C3-4405-AEE4-C1324E02FE27--62D61C43-0573-4B6B-B42E-D3BCB3FFC60D (Friendly Name: ).2330400-92233720368547758083140Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47924552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:12:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7E8375C7-83C3-4405-AEE4-C1324E02FE27--CC4D664C-BDD3-4408-A864-9106427FF670 (Friendly Name: fa068952-807f-48d9-8402-a753d8592ea5) successfully connected to port C9E6E695-6E78-4155-A353-D8413F1101CC (Friendly Name: fa068952-807f-48d9-8402-a753d8592ea5) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083139Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47924552n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2122544583-1141212099-851567790-67095815810/19/2021 1:12:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7E8375C7-83C3-4405-AEE4-C1324E02FE27--CC4D664C-BDD3-4408-A864-9106427FF670 (Friendly Name: ).2330400-92233720368547758083138Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47924552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:12:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7E8375C7-83C3-4405-AEE4-C1324E02FE27--AE01054C-7267-4B26-AE62-F2CF6AE99FF9 (Friendly Name: f983c135-fa15-44d6-bdd2-585543f1af33) successfully connected to port A6A44169-D00B-49B4-A83F-77E3543CE5C1 (Friendly Name: f983c135-fa15-44d6-bdd2-585543f1af33) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083137Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47924552n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2122544583-1141212099-851567790-67095815810/19/2021 1:12:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7E8375C7-83C3-4405-AEE4-C1324E02FE27--AE01054C-7267-4B26-AE62-F2CF6AE99FF9 (Friendly Name: ).2330400-92233720368547758083136Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem47924552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:12:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the running state.7036016384400-91873432398358118403135Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:12:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403134Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:12:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A0D445DE-49D2-4BAF-84EB-D136730EB1C6--82BC2C49-509C-4927-9966-7A4E3308B1DE (Friendly Name: e82ae2be-0146-411d-aa51-b458c4b93b4c).2330400-92233720368547758083133Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46164252n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2698266078-1269778898-919726980-333349233910/19/2021 1:12:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0D445DE-49D2-4BAF-84EB-D136730EB1C6--82BC2C49-509C-4927-9966-7A4E3308B1DE successfully disconnected from port .2340400-92233720368547758083132Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46164252n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2698266078-1269778898-919726980-333349233910/19/2021 1:12:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic E622A0E4-ED23-4A8A-ADE2-55DBDBF8D0FA--885581AA-A024-46D8-88E1-6D617FF0885D (Friendly Name: 288699e8-942e-417f-8fc0-6af2226e8c10).2330400-92233720368547758083131Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37843144n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3861029092-1250618659-3679838893-420799919510/19/2021 1:12:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E622A0E4-ED23-4A8A-ADE2-55DBDBF8D0FA--885581AA-A024-46D8-88E1-6D617FF0885D successfully disconnected from port .2340400-92233720368547758083130Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37843144n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3861029092-1250618659-3679838893-420799919510/19/2021 1:12:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A0D445DE-49D2-4BAF-84EB-D136730EB1C6--82BC2C49-509C-4927-9966-7A4E3308B1DE (Friendly Name: e82ae2be-0146-411d-aa51-b458c4b93b4c) successfully connected to port C244E442-B2DF-4824-A26E-307CA2E593D6 (Friendly Name: e82ae2be-0146-411d-aa51-b458c4b93b4c) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083129Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46164832n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2698266078-1269778898-919726980-333349233910/19/2021 1:12:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A0D445DE-49D2-4BAF-84EB-D136730EB1C6--82BC2C49-509C-4927-9966-7A4E3308B1DE (Friendly Name: ).2330400-92233720368547758083128Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem46164832n-h1-789963-20.cbci-789963-20.local10/19/2021 1:12:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 19A13E09-70D3-4A02-87FF-4E525FD201CF--3ECDE2B2-1067-464D-8C56-10C205A429E8 (Friendly Name: bd7b11bf-d3fd-44e2-87a0-6d060850f4fb) successfully connected to port 52DE9AF1-AE5C-45B8-B65C-0C5ACCE24460 (Friendly Name: bd7b11bf-d3fd-44e2-87a0-6d060850f4fb) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083127Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45483804n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-429997577-1241673939-1380908935-347300310310/19/2021 1:11:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 19A13E09-70D3-4A02-87FF-4E525FD201CF--3ECDE2B2-1067-464D-8C56-10C205A429E8 (Friendly Name: ).2330400-92233720368547758083126Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem45483804n-h1-789963-20.cbci-789963-20.local10/19/2021 1:11:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic A3C7C08F-3EB8-4976-B149-09A934ACEA59--442E5ECD-1E0E-4D87-8B47-61979EA4816F (Friendly Name: ba732230-5617-4438-ae92-bde0319ba1ca).2330400-92233720368547758083125Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33602064n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2747777167-1232486072-2835958193-150855173210/19/2021 1:11:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A3C7C08F-3EB8-4976-B149-09A934ACEA59--442E5ECD-1E0E-4D87-8B47-61979EA4816F successfully disconnected from port .2340400-92233720368547758083124Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33602064n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2747777167-1232486072-2835958193-150855173210/19/2021 1:11:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC A3C7C08F-3EB8-4976-B149-09A934ACEA59--442E5ECD-1E0E-4D87-8B47-61979EA4816F (Friendly Name: ba732230-5617-4438-ae92-bde0319ba1ca) successfully connected to port 42FE9C37-93CA-4D87-B47C-A3B07682FBDA (Friendly Name: ba732230-5617-4438-ae92-bde0319ba1ca) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083123Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33602064n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2747777167-1232486072-2835958193-150855173210/19/2021 1:11:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic A3C7C08F-3EB8-4976-B149-09A934ACEA59--442E5ECD-1E0E-4D87-8B47-61979EA4816F (Friendly Name: ).2330400-92233720368547758083122Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem33602064n-h1-789963-20.cbci-789963-20.local10/19/2021 1:11:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC E622A0E4-ED23-4A8A-ADE2-55DBDBF8D0FA--885581AA-A024-46D8-88E1-6D617FF0885D (Friendly Name: 288699e8-942e-417f-8fc0-6af2226e8c10) successfully connected to port 8C32FD60-C540-4262-AA0C-20D8A755CC69 (Friendly Name: 288699e8-942e-417f-8fc0-6af2226e8c10) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083121Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37843144n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3861029092-1250618659-3679838893-420799919510/19/2021 1:11:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic E622A0E4-ED23-4A8A-ADE2-55DBDBF8D0FA--885581AA-A024-46D8-88E1-6D617FF0885D (Friendly Name: ).2330400-92233720368547758083120Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem37843144n-h1-789963-20.cbci-789963-20.local10/19/2021 1:11:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 3EE96A20-F72C-4B70-B655-5175349DFBDF--4D3A2106-A74B-481C-AA2B-C040B2A5943F (Friendly Name: 65091d8e-fb5c-44b5-b0e6-8556cbfcc009).2330400-92233720368547758083119Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1004536n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1055484448-1265694508-1968264630-375780894810/19/2021 1:11:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3EE96A20-F72C-4B70-B655-5175349DFBDF--4D3A2106-A74B-481C-AA2B-C040B2A5943F successfully disconnected from port .2340400-92233720368547758083118Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem1004536n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1055484448-1265694508-1968264630-375780894810/19/2021 1:11:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118403117Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:11:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic F7B92D7A-64DD-4D58-A071-F827891A41D7--02BBA11F-9646-4476-8162-D2A39BE19C15 (Friendly Name: c7b6fb47-d00f-4f69-8cc7-7d628d6351e1).2330400-92233720368547758083116Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20122360n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4156108154-1297638621-670593440-361136807310/19/2021 1:11:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F7B92D7A-64DD-4D58-A071-F827891A41D7--02BBA11F-9646-4476-8162-D2A39BE19C15 successfully disconnected from port .2340400-92233720368547758083115Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20122360n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4156108154-1297638621-670593440-361136807310/19/2021 1:11:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC F7B92D7A-64DD-4D58-A071-F827891A41D7--02BBA11F-9646-4476-8162-D2A39BE19C15 (Friendly Name: c7b6fb47-d00f-4f69-8cc7-7d628d6351e1) successfully connected to port 5E2AD516-D6CA-457A-84CE-3DEBE82652B8 (Friendly Name: c7b6fb47-d00f-4f69-8cc7-7d628d6351e1) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083114Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20122360n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-4156108154-1297638621-670593440-361136807310/19/2021 1:11:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic F7B92D7A-64DD-4D58-A071-F827891A41D7--02BBA11F-9646-4476-8162-D2A39BE19C15 (Friendly Name: ).2330400-92233720368547758083113Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem20122360n-h1-789963-20.cbci-789963-20.local10/19/2021 1:11:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic B5172F00-9DCB-4C6D-91A1-D0E645581473--65010AA1-2589-4393-A5C3-F27DA09F08BB (Friendly Name: 354dac72-cf2d-4e4a-8d08-b4adbe150771).2330400-92233720368547758083112Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem944836n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3038195456-1282252235-3872432529-193071315710/19/2021 1:11:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B5172F00-9DCB-4C6D-91A1-D0E645581473--65010AA1-2589-4393-A5C3-F27DA09F08BB successfully disconnected from port .2340400-92233720368547758083111Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem944836n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3038195456-1282252235-3872432529-193071315710/19/2021 1:11:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 3EE96A20-F72C-4B70-B655-5175349DFBDF--4D3A2106-A74B-481C-AA2B-C040B2A5943F (Friendly Name: 65091d8e-fb5c-44b5-b0e6-8556cbfcc009) successfully connected to port 7365C1DF-44BD-464C-9075-A2191425D8E4 (Friendly Name: 65091d8e-fb5c-44b5-b0e6-8556cbfcc009) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083110Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10042480n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-1055484448-1265694508-1968264630-375780894810/19/2021 1:11:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 3EE96A20-F72C-4B70-B655-5175349DFBDF--4D3A2106-A74B-481C-AA2B-C040B2A5943F (Friendly Name: ).2330400-92233720368547758083109Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem10042480n-h1-789963-20.cbci-789963-20.local10/19/2021 1:11:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC B5172F00-9DCB-4C6D-91A1-D0E645581473--65010AA1-2589-4393-A5C3-F27DA09F08BB (Friendly Name: 354dac72-cf2d-4e4a-8d08-b4adbe150771) successfully connected to port 8432DE75-3596-44F5-BFB4-2C3998CE3785 (Friendly Name: 354dac72-cf2d-4e4a-8d08-b4adbe150771) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083108Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem944940n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-3038195456-1282252235-3872432529-193071315710/19/2021 1:11:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic B5172F00-9DCB-4C6D-91A1-D0E645581473--65010AA1-2589-4393-A5C3-F27DA09F08BB (Friendly Name: ).2330400-92233720368547758083107Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem944940n-h1-789963-20.cbci-789963-20.local10/19/2021 1:11:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1CDBC78C-E5D7-4D2A-9254-7F82E2FD1950--552EAA00-8D4D-4C43-8F9D-457FE9B9F813 (Friendly Name: b65b0be0-ac36-47ec-86d8-ad4f7dc8e791).2330400-92233720368547758083106Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38323384n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-484165516-1294656983-2189382802-134388067410/19/2021 1:11:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1CDBC78C-E5D7-4D2A-9254-7F82E2FD1950--552EAA00-8D4D-4C43-8F9D-457FE9B9F813 successfully disconnected from port .2340400-92233720368547758083105Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38323384n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-484165516-1294656983-2189382802-134388067410/19/2021 1:11:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 7E85D997-9621-4D60-96B3-551368561493--D52D86C9-BD38-4CE3-9554-BFB721B8AD47 (Friendly Name: f6a19cba-e83c-4c58-8e18-cf4809fc6b92).2330400-92233720368547758083104Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41204336n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2122701207-1298175521-324383638-246758359210/19/2021 1:10:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7E85D997-9621-4D60-96B3-551368561493--D52D86C9-BD38-4CE3-9554-BFB721B8AD47 successfully disconnected from port .2340400-92233720368547758083103Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41204336n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2122701207-1298175521-324383638-246758359210/19/2021 1:10:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Status 0x00001069 determining that device interface \\?\{8e7bd593-6e6c-4c52-86a6-77175494dd8e}#MsVhdHba#1&3030e83&0&01#{2accfe60-c130-11d2-b082-00a0c91efb8b} does not support iSCSI WMI interfaces. If this device is not an iSCSI HBA then this error can be ignored. 108030360287970189639683102MSiSCSISystemn-h1-789963-20.cbci-789963-20.local10/19/2021 1:10:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 7E85D997-9621-4D60-96B3-551368561493--D52D86C9-BD38-4CE3-9554-BFB721B8AD47 (Friendly Name: f6a19cba-e83c-4c58-8e18-cf4809fc6b92) successfully connected to port 7876457E-6BC4-47E0-AA59-CA977D88C465 (Friendly Name: f6a19cba-e83c-4c58-8e18-cf4809fc6b92) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083101Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41204324n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-2122701207-1298175521-324383638-246758359210/19/2021 1:10:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 7E85D997-9621-4D60-96B3-551368561493--D52D86C9-BD38-4CE3-9554-BFB721B8AD47 (Friendly Name: ).2330400-92233720368547758083100Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem41204324n-h1-789963-20.cbci-789963-20.local10/19/2021 1:10:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Delete' succeeded on nic 1A6DE41C-2DB3-45F0-B346-7314DF77E290--1A60CB77-28CF-41F3-A020-999318AD5BD7 (Friendly Name: 8305cb38-2812-4b5c-b733-a87a992c86c2).2330400-92233720368547758083099Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23804872n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-443409436-1173368243-343099059-243076092710/19/2021 1:10:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1A6DE41C-2DB3-45F0-B346-7314DF77E290--1A60CB77-28CF-41F3-A020-999318AD5BD7 successfully disconnected from port .2340400-92233720368547758083098Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23804872n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-443409436-1173368243-343099059-243076092710/19/2021 1:10:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1A6DE41C-2DB3-45F0-B346-7314DF77E290--1A60CB77-28CF-41F3-A020-999318AD5BD7 (Friendly Name: 8305cb38-2812-4b5c-b733-a87a992c86c2) successfully connected to port CA418E1C-C4FB-492B-9535-0808480C9726 (Friendly Name: 8305cb38-2812-4b5c-b733-a87a992c86c2) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083097Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23802248n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-443409436-1173368243-343099059-243076092710/19/2021 1:10:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1A6DE41C-2DB3-45F0-B346-7314DF77E290--1A60CB77-28CF-41F3-A020-999318AD5BD7 (Friendly Name: ).2330400-92233720368547758083096Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem23802248n-h1-789963-20.cbci-789963-20.local10/19/2021 1:10:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 1CDBC78C-E5D7-4D2A-9254-7F82E2FD1950--552EAA00-8D4D-4C43-8F9D-457FE9B9F813 (Friendly Name: b65b0be0-ac36-47ec-86d8-ad4f7dc8e791) successfully connected to port 13D206A3-01DF-4172-9831-6BD3B4CFDF8A (Friendly Name: b65b0be0-ac36-47ec-86d8-ad4f7dc8e791) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758083095Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38324464n-h1-789963-20.cbci-789963-20.localS-1-5-83-1-484165516-1294656983-2189382802-134388067410/19/2021 1:10:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 1CDBC78C-E5D7-4D2A-9254-7F82E2FD1950--552EAA00-8D4D-4C43-8F9D-457FE9B9F813 (Friendly Name: ).2330400-92233720368547758083094Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem38324464n-h1-789963-20.cbci-789963-20.local10/19/2021 1:10:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118403093Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:10:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118403092Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:10:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118403091Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:10:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Biometric Service service entered the stopped state.7036016384400-91873432398358118403090Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:09:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118403089Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:09:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the stopped state.7036016384400-91873432398358118403088Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:09:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118403087Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:09:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403086Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:09:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Downloaded Maps Manager service entered the stopped state.7036016384400-91873432398358118403085Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:08:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the running state.7036016384400-91873432398358118403084Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:08:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118403083Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:08:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the running state.7036016384400-91873432398358118403082Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:08:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Downloaded Maps Manager service entered the running state.7036016384400-91873432398358118403081Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:08:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the running state.7036016384400-91873432398358118403080Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:08:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the running state.7036016384400-91873432398358118403079Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:08:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118403078Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:08:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The neutron-hyperv-agent service entered the running state.7036016384400-91873432398358118403077Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:07:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user CBCI-789963-20\administrator SID (S-1-5-21-1761713755-3660064525-1578762546-500) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403076Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9882972n-h1-789963-20.cbci-789963-20.localS-1-5-21-1761713755-3660064525-1578762546-50010/19/2021 1:07:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the neutron-hyperv-agent service was changed from demand start to auto start.7040016384400-91873432398358118403075Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.localS-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 1:07:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nova-compute service entered the running state.7036016384400-91873432398358118403074Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:07:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user CBCI-789963-20\administrator SID (S-1-5-21-1761713755-3660064525-1578762546-500) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403073Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9882972n-h1-789963-20.cbci-789963-20.localS-1-5-21-1761713755-3660064525-1578762546-50010/19/2021 1:07:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118403072Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:07:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nova-compute service was changed from demand start to auto start.7040016384400-91873432398358118403071Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.localS-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 1:07:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403070Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:07:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083069Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14603428n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:07:09 AM2753ebc6-041a-48a8-8e18-d8b8d057bf0dsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403068Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083067Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14603428n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:59 AMd24cf959-2d89-478d-b710-ad430daf7385systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the stopped state.7036016384400-91873432398358118403066Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800900n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source VM IC Time Synchronization Provider.350400-92233720368547758083065Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem10281972n-h1-789963-20.cbci-789963-20.localS-1-5-1910/19/2021 1:06:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the stopped state.7036016384400-91873432398358118403064Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639683063Virtual Disk ServiceSystemn-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the running state.7036016384400-91873432398358118403062Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639683061Virtual Disk ServiceSystemn-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403060Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem98892n-h1-789963-20.cbci-789963-20.localS-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 1:06:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from n-ad-789963-20.cbci-789963-20.local (ntp.d|0.0.0.0:123->10.222.0.30:123).370400-92233720368547758083059Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem10281164n-h1-789963-20.cbci-789963-20.localS-1-5-1910/19/2021 1:06:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\cloudbase-init SID (S-1-5-21-1046463506-2987789712-2060206995-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403058Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9881020n-h1-789963-20.cbci-789963-20.localS-1-5-21-1046463506-2987789712-2060206995-100010/19/2021 1:06:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118403057Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800900n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system failed to register pointer (PTR) resource records (RRs) for network adapter with settings: Adapter Name : {77425112-6F57-4FB7-97F4-05416DCF011E} Host Name : n-h1-789963-20 Adapter-specific Domain Suffix : cbci-789963-20.local DNS server list : 10.222.0.30, 8.8.8.8, 4.4.4.4 Sent update to server : <?> IP Address : 10.222.0.74 The reason the system could not register these RRs during the update request was because of a system problem. You can manually retry DNS registration of the network adapter and its settings by typing 'ipconfig /registerdns' at the command prompt. If problems still persist, contact your DNS server or network systems administrator. See event details for specific error code information.8014041028046116860184273879043056Microsoft-Windows-DNS-Client1c95126e-7eea-49a9-a3fe-a378b03ddb4dSystem11282320n-h1-789963-20.cbci-789963-20.localS-1-5-2010/19/2021 1:06:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wuauserv service entered the running state.7036016384400-91873432398358118403055Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403054Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083053Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14603428n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:35 AMcd57fecc-22f8-4be4-bb17-9b552304edfdsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118403052Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the stopped state.7036016384400-91873432398358118403051Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403050Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 2 Group Policy objects were detected and applied.15020401-92233720368547758083049Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System14602900n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:35 AM1907b38d-9f33-4054-b452-ff6d5e945c16systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The swprv service entered the running state.7036016384400-91873432398358118403048Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800900n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The firewall exception to allow Internet Storage Name Server (iSNS) client functionality is not enabled. iSNS client functionality is not available.121030360287970189639683047MSiSCSISystemn-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmcompute service entered the running state.7036016384400-91873432398358118403046Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wlidsvc service entered the running state.7036016384400-91873432398358118403045Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800876n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the stopped state.7036016384400-91873432398358118403044Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MSiSCSI service entered the running state.7036016384400-91873432398358118403043Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the running state.7036016384400-91873432398358118403042Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118403041Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800804n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\cloudbase-init SID (S-1-5-21-1046463506-2987789712-2060206995-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118403040Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem98892n-h1-789963-20.cbci-789963-20.localS-1-5-21-1046463506-2987789712-2060206995-100010/19/2021 1:06:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981443039Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4504n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118403038Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:10.222.0.74 has been brought up.42000400-92233720368547758083037Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System14602276n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981443036Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4184n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The KeyIso service entered the running state.7036016384400-91873432398358118403035Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118403034Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800884n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118403033Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001344n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118403032Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118403031Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118403030Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001344n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118403029Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001344n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118403028Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SessionEnv service entered the running state.7036016384400-91873432398358118403027Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118403026Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118403025Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800908n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118403024Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800544n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118403023Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118403022Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001076n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118403021Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001072n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118403020Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118403019Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800544n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118403018Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118403017Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001292n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118403016Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001284n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118403015Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800540n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118403014Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800900n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKEEXT service entered the running state.7036016384400-91873432398358118403013Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the running state.7036016384400-91873432398358118403012Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118403011Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Netlogon service entered the running state.7036016384400-91873432398358118403010Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118403009Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001336n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118403008Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001336n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118403007Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001336n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118403006Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001336n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118403005Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001336n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A new self signed certificate to be used for RD Session Host Server authentication on SSL connections was generated. The name on this certificate is n-h1-789963-20.cbci-789963-20.local. The SHA1 hash of the certificate is in the event data.1056049152400360287970189639683004Microsoft-Windows-TerminalServices-RemoteConnectionManagerc76baa63-ae81-421c-b425-340b4b24157fSystem00n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639683003Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118403002Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001336n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CertPropSvc service entered the running state.7036016384400-91873432398358118403001Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118403000Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001336n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UmRdpService service entered the running state.7036016384400-91873432398358118402999Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is now operational.230410160-92233720368547758082998Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4808n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082997Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4808n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082996Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4808n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PolicyAgent service entered the running state.7036016384400-91873432398358118402995Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118402994Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402993Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118402992Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402991Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcbService service entered the running state.7036016384400-91873432398358118402990Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001284n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402989Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001080n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the running state.7036016384400-91873432398358118402988Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001352n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402987Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402986Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402985Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402984Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402983Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402982Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402981Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402980Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001084n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402979Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402978Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402977Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001088n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442976Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4500n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442975Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4500n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442974Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4500n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?10?-?19T01:06:30.212000000Z from ?2021?-?10?-?19T01:06:29.726218400Z. Change Reason: An application or system component changed the time.11450-92233720368547757922973Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem5281376n-h1-789963-20.cbci-789963-20.localS-1-5-1910/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402972Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001336n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402971Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001352n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402970Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001336n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402969Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001332n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402968Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522967Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System5281200n-h1-789963-20.cbci-789963-20.localS-1-5-1910/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522966Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem5281124n-h1-789963-20.cbci-789963-20.localS-1-5-1910/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TermService service entered the running state.7036016384400-91873432398358118402965Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402964Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402963Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402962Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8001092n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402961Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402960Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402959Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800884n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402958Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800904n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402957Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402956Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402955Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402954Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System800896n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082953Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem820824n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:28 AM87102d2f-c485-0005-342d-108785c4d701systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042952Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem688692n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082951Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is now operational.230410160-92233720368547758082950Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082949Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is no longer operational.240410170-92233720368547758082948Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Protocol NIC /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully bound to port D29B6748-0E63-46D0-9911-412A9C1D9747 (Friendly Name: br-data_External) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).170410120-92233720368547758082947Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully connected to port D29B6748-0E63-46D0-9911-412A9C1D9747 (Friendly Name: br-data_External) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758082946Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully updated NIC NDIS QoS with Miniport NIC /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: Microsoft Hyper-V Network Adapter #2)1910400-92233720368547758082945Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: ).2330400-92233720368547758082944Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4136n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082943Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082942Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082941Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082940Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082939Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4184n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082938Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4184n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082937Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4184n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082936Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4184n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082935Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4184n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082934Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4184n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082933Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082932Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4384n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
If Digest support selected for iSCSI Session, Will use Processor support for Digest computation.671638440360287970189639682931iScsiPrtSystemn-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Switch 667F6114-E9CD-43BB-A223-D5105693FAA1 (Friendly Name: br-data) successfully initialized.90410050-92233720368547758082930Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4184n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 667F6114-E9CD-43BB-A223-D5105693FAA1 (Friendly Name: br-data) successfully connected to port 667F6114-E9CD-43BB-A223-D5105693FAA1 (Friendly Name: br-data) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758082929Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4184n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 667F6114-E9CD-43BB-A223-D5105693FAA1 (Friendly Name: br-data).2330400-92233720368547758082928Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem4184n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802927Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802926Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4224n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442925Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682924VfpExtSystemn-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442923Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume C: (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062922Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4224n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442921Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442920Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442919Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442918Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442917Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442916Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082915Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082914Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082913Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082912Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082911Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082910Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2021?-?10?-?19T01:06:20.480558800Z.120410-92233720368547756802909Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48n-h1-789963-20.cbci-789963-20.localS-1-5-1810/19/2021 1:06:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2021?-?10?-?19T01:06:13.425400600Z.130420-92233720368547756802908Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4136n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162907Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System700704n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service entered the stopped state.7036016384400-91873432398358118402906Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system uptime is 9 seconds.60133276840360287970189639682905EventLogSystemn-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682904EventLogSystemn-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682903EventLogSystemn-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services service entered the stopped state.7036016384400-91873432398358118402902Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402901Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402900Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402899Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402898Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the stopped state.7036016384400-91873432398358118402897Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402896Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402895Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-20.cbci-789963-20.local10/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402894Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402893Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKE and AuthIP IPsec Keying Modules service entered the stopped state.7036016384400-91873432398358118402892Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402891Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402890Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8124912n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the stopped state.7036016384400-91873432398358118402889Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Software Shadow Copy Provider service entered the stopped state.7036016384400-91873432398358118402888Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402887Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service entered the stopped state.7036016384400-91873432398358118402886Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402885Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123552n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522884Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem14521564n-h1-789963-20S-1-5-1910/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402883Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8122968n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IPsec Policy Agent service entered the stopped state.7036016384400-91873432398358118402882Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8124912n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402881Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8124912n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the stopped state.7036016384400-91873432398358118402880Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8124912n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic System Host service entered the stopped state.7036016384400-91873432398358118402879Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8122212n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Install Service service entered the stopped state.7036016384400-91873432398358118402878Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8122212n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services UserMode Port Redirector service entered the stopped state.7036016384400-91873432398358118402877Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812620n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522876Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System14521628n-h1-789963-20S-1-5-1910/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Initiator Service service entered the stopped state.7036016384400-91873432398358118402875Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402874Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121612n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?10?-?19T01:06:08.878000000Z from ?2021?-?10?-?19T01:06:08.882254100Z. Change Reason: An application or system component changed the time.11450-92233720368547757922873Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14601544n-h1-789963-20S-1-5-1910/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402872Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123388n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HV Host Service service entered the stopped state.7036016384400-91873432398358118402871Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402870Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the stopped state.7036016384400-91873432398358118402869Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402868Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402867Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8122968n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402866Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8122968n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402865Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8122968n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682864EventLogSystemn-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is not listening for WS-Management requests. User Action If you did not intentionally stop the service, use the following command to see the WinRM configuration: winrm enumerate winrm/config/listener1014907300360287970189639682863Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00n-h1-789963-2010/19/2021 1:06:08 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\system32\shutdown.exe (N-H1-789963-20) has initiated the restart of computer N-H1-789963-20 on behalf of user N-H1-789963-20\Admin for the following reason: No title for this reason could be found Reason Code: 0x800000ff Shutdown Type: restart Comment: Reboot initiated by Ansible1074032768400-91873432398358118402862User32b0aa8734-56f7-41cc-b2f4-de228e98b946System600616n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 1:06:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402861Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 1:06:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The machine n-h1-789963-20 successfully joined the domain cbci-789963-20.local.40960400-92233720368547758082860NetJoin9741fd4e-3757-479f-a3c6-fc49f6d5edd0System13601396n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 1:06:04 AM00000000-0000-0000-0100-000000000000systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Netlogon service entered the running state.7036016384400-91873432398358118402859Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123388n-h1-789963-2010/19/2021 1:06:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Connectivity Assistant service entered the stopped state.7036016384400-91873432398358118402858Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 1:06:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
This computer has been successfully joined to domain 'cbci-789963-20.local'.3260040360287970189639682857WorkstationSystemn-h1-789963-2010/19/2021 1:06:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402856Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 1:06:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402855Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 1:05:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402854Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 1:05:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402853Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 1:05:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402852Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 1:05:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402851Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 1:03:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402850Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 1:01:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402849Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 1:00:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402848Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:55:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402847Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123388n-h1-789963-2010/19/2021 12:54:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402846Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8123388n-h1-789963-2010/19/2021 12:54:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The firewall exception to allow Internet Storage Name Server (iSNS) client functionality is not enabled. iSNS client functionality is not available.121030360287970189639682845MSiSCSISystemn-h1-789963-2010/19/2021 12:53:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Initiator Service service entered the running state.7036016384400-91873432398358118402844Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:53:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118402843Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:53:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the running state.7036016384400-91873432398358118402842Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:53:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
If Digest support selected for iSCSI Session, Will use Processor support for Digest computation.671638440360287970189639682841iScsiPrtSystemn-h1-789963-2010/19/2021 12:53:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the running state.7036016384400-91873432398358118402840Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:53:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft iSCSI Initiator Service service was changed from demand start to auto start.7040016384400-91873432398358118402839Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:53:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402838Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:53:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402837Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:53:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402836Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:52:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402835Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:52:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402834Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:52:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402833Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:52:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402832Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:52:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402831Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:52:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402830Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:52:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402829Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:52:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402828Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:52:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402827Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:52:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402826Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:51:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402825Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:51:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402824Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:50:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402823Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:50:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402822Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:50:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402821Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402820Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:47:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402819Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:46:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402818Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:46:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402817Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:46:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402816Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:46:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402815Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:45:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402814Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:45:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402813Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:45:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402812Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:45:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402811Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:45:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402810Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:45:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402809Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:44:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402808Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:43:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Installer service entered the stopped state.7036016384400-91873432398358118402807Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:43:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402806Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:41:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118402805Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:41:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402804Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:41:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118402803Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:40:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118402802Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:40:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the stopped state.7036016384400-91873432398358118402801Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:40:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402800Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:40:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Registry service entered the stopped state.7036016384400-91873432398358118402799Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:40:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The App Readiness service entered the stopped state.7036016384400-91873432398358118402798Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:40:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402797Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:40:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402796Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:40:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402795Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:40:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402794Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:39:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402793Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:39:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the running state.7036016384400-91873432398358118402792Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121616n-h1-789963-2010/19/2021 12:38:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402791Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121616n-h1-789963-2010/19/2021 12:38:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402790Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121616n-h1-789963-2010/19/2021 12:38:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402789Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121616n-h1-789963-2010/19/2021 12:38:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the stopped state.7036016384400-91873432398358118402788Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121616n-h1-789963-2010/19/2021 12:38:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402787Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:38:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402786Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:38:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402785Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:38:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402784Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:38:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402783Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:38:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402782Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:38:15 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402781Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:38:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402780Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:38:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402779Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:38:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402778Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:38:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402777Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:38:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Installer service entered the running state.7036016384400-91873432398358118402776Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121616n-h1-789963-2010/19/2021 12:38:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402775Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:37:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402774Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:37:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the running state.7036016384400-91873432398358118402773Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121616n-h1-789963-2010/19/2021 12:37:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Insider Service service entered the running state.7036016384400-91873432398358118402772Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121616n-h1-789963-2010/19/2021 12:37:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the running state.7036016384400-91873432398358118402771Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121616n-h1-789963-2010/19/2021 12:37:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402770Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:37:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402769Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:36:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402768Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:36:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402767Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:36:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the stopped state.7036016384400-91873432398358118402766Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121616n-h1-789963-2010/19/2021 12:36:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402765Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:36:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402764Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:36:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402763Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:36:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the running state.7036016384400-91873432398358118402762Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:36:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402761Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:36:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the running state.7036016384400-91873432398358118402760Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:36:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402759Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:35:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402758Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:35:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushsvc service entered the stopped state.7036016384400-91873432398358118402757Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:34:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402756Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:34:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402755Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:34:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402754Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:34:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402753Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:34:01 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402752Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:34:00 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402751Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402750Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402749Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402748Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:33:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Biometric Service service entered the stopped state.7036016384400-91873432398358118402747Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:33:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402746Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402745Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).370400-92233720368547758082744Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14601568n-h1-789963-20S-1-5-1910/19/2021 12:33:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402743Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761648n-h1-789963-20S-1-5-2010/19/2021 12:33:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402742Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem97692n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118402741Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:33:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402740Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem97692n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).370400-92233720368547758082739Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14601568n-h1-789963-20S-1-5-1910/19/2021 12:33:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402738Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem97692n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).370400-92233720368547758082737Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14601560n-h1-789963-20S-1-5-1910/19/2021 12:33:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully connected to port D29B6748-0E63-46D0-9911-412A9C1D9747 (Friendly Name: br-data_External) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758082736Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26323092n-h1-789963-20S-1-5-1810/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is now operational.230410160-92233720368547758082735Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6802864n-h1-789963-2010/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082734Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem6802864n-h1-789963-20S-1-5-1810/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is no longer operational.240410170-92233720368547758082733Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6802864n-h1-789963-2010/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: Microsoft Hyper-V Network Adapter #2) is no longer operational.240410170-92233720368547758082732Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6802864n-h1-789963-2010/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Protocol NIC /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: Microsoft Hyper-V Network Adapter #2) successfully bound to port (Friendly Name: ) on switch (Friendly Name: ).170410120-92233720368547758082731Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6802864n-h1-789963-20S-1-5-1810/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully updated NIC NDIS QoS with Miniport NIC /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: Microsoft Hyper-V Network Adapter #2)1910400-92233720368547758082730Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6802864n-h1-789963-2010/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic /DEVICE/{35A3544D-A2C5-4F15-A096-BFD5F4A5AD8A} (Friendly Name: ).2330400-92233720368547758082729Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem6802864n-h1-789963-2010/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082728Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem6802864n-h1-789963-20S-1-5-1810/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082727Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem43528n-h1-789963-20S-1-5-1810/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082726Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem43536n-h1-789963-20S-1-5-1810/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082725Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem6803044n-h1-789963-2010/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082724Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem43536n-h1-789963-20S-1-5-1810/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal is no longer active.42010400-92233720368547758082723Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System6802860n-h1-789963-20S-1-5-1810/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' is halting60410030-92233720368547758082722Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem43532n-h1-789963-20S-1-5-1810/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082721Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem43532n-h1-789963-20S-1-5-1810/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\NETWORK SERVICE SID (S-1-5-20) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402720Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-2010/19/2021 12:33:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Switch 667F6114-E9CD-43BB-A223-D5105693FAA1 (Friendly Name: br-data) successfully initialized.90410050-92233720368547758082719Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26322596n-h1-789963-20S-1-5-1810/19/2021 12:33:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NIC 667F6114-E9CD-43BB-A223-D5105693FAA1 (Friendly Name: br-data) successfully connected to port 667F6114-E9CD-43BB-A223-D5105693FAA1 (Friendly Name: br-data) on switch 667F6114-E9CD-43BB-A223-D5105693FAA1(Friendly Name: br-data).2320400-92233720368547758082718Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26322596n-h1-789963-20S-1-5-1810/19/2021 12:33:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operation 'Create' succeeded on nic 667F6114-E9CD-43BB-A223-D5105693FAA1 (Friendly Name: br-data).2330400-92233720368547758082717Microsoft-Windows-Hyper-V-VmSwitch67dc0d66-3695-47c0-9642-33f76f7bd7adSystem26322596n-h1-789963-2010/19/2021 12:33:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver wvms_mp.inf_amd64_e1065995a017ab1b\wvms_mp.inf for Device Instance ID ROOT\VMS_VSMP\0000 with the following status: 0x0.200010470050-92233720368547758082716Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System10722176n-h1-789963-20S-1-5-1810/19/2021 12:33:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: VMSMP Service File Name: \SystemRoot\System32\drivers\vmswitch.sys Service Type: kernel mode driver Service Start Type: demand start Service Account: 7045016384400-91873432398358118402715Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8122000n-h1-789963-20S-1-5-1810/19/2021 12:33:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118402714Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8122000n-h1-789963-2010/19/2021 12:33:22 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402713Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761940n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the neutron-hyperv-agent service was changed from auto start to demand start.7040016384400-91873432398358118402712Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8122000n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:17 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: neutron-hyperv-agent Service File Name: c:\openstack\bin\OpenStackService.exe neutron-hyperv-agent c:\python37\scripts\neutron-hyperv-agent.exe --config-file c:\openstack\etc\neutron-hyperv-agent.conf Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem7045016384400-91873432398358118402711Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8122000n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the stopped state.7036016384400-91873432398358118402710Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8122000n-h1-789963-2010/19/2021 12:33:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nova-compute service was changed from auto start to demand start.7040016384400-91873432398358118402709Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812880n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A service was installed in the system. Service Name: nova-compute Service File Name: c:\openstack\bin\OpenStackService.exe nova-compute c:\python37\scripts\nova-compute.exe --config-file c:\openstack\etc\nova.conf Service Type: user mode service Service Start Type: auto start Service Account: LocalSystem7045016384400-91873432398358118402708Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402707Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761940n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The IKE and AuthIP IPsec Keying Modules service entered the running state.7036016384400-91873432398358118402706Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812880n-h1-789963-2010/19/2021 12:33:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the IKE and AuthIP IPsec Keying Modules service was changed from demand start to auto start.7040016384400-91873432398358118402705Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812880n-h1-789963-20S-1-5-1810/19/2021 12:33:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402704Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761940n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:33:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402703Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761940n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:32:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402702Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761940n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:32:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Portable Device Enumerator Service service entered the stopped state.7036016384400-91873432398358118402701Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:32:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402700Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761940n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:32:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Downloaded Maps Manager service entered the stopped state.7036016384400-91873432398358118402699Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:32:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the running state.7036016384400-91873432398358118402698Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812880n-h1-789963-2010/19/2021 12:32:39 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the running state.7036016384400-91873432398358118402697Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121736n-h1-789963-2010/19/2021 12:32:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MapsBroker service entered the running state.7036016384400-91873432398358118402696Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121736n-h1-789963-2010/19/2021 12:32:32 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WdiSystemHost service entered the running state.7036016384400-91873432398358118402695Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121736n-h1-789963-2010/19/2021 12:32:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DPS service entered the running state.7036016384400-91873432398358118402694Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121736n-h1-789963-2010/19/2021 12:32:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the running state.7036016384400-91873432398358118402693Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121736n-h1-789963-2010/19/2021 12:32:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402692Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:32:25 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402691Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:31:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402690Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761940n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:31:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the stopped state.7036016384400-91873432398358118402689Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:31:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PolicyAgent service entered the running state.7036016384400-91873432398358118402688Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812880n-h1-789963-2010/19/2021 12:31:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SSL Certificate Settings created by an admin process for endpoint : 0.0.0.0:5986 .15301032768300360287970189639682687Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System41248n-h1-789963-2010/19/2021 12:31:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Reservation for namespace identified by URL prefix https://+:5986/wsman/ was successfully added.15007016384400360287970189639682686Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System41248n-h1-789963-2010/19/2021 12:31:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Reservation for namespace identified by URL prefix https://+:5986/wsman/ was successfully deleted.15008016384400360287970189639682685Microsoft-Windows-HttpEvent7b6bc78c-898b-4170-bbf8-1a469ea43fc5System41248n-h1-789963-2010/19/2021 12:31:26 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the stopped state.7036016384400-91873432398358118402684Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812880n-h1-789963-2010/19/2021 12:31:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639682683Virtual Disk ServiceSystemn-h1-789963-2010/19/2021 12:31:23 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vds service entered the running state.7036016384400-91873432398358118402682Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812880n-h1-789963-2010/19/2021 12:31:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639682681Virtual Disk ServiceSystemn-h1-789963-2010/19/2021 12:31:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\Admin SID (S-1-5-21-1046463506-2987789712-2060206995-1001) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402680Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100110/19/2021 12:31:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrustedInstaller service entered the running state.7036016384400-91873432398358118402679Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812880n-h1-789963-2010/19/2021 12:30:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TBS device identifier has been generated.12820400-92233720368547758082678Microsoft-Windows-TPM-WMI7d5387b0-cbe0-11da-a94d-0800200c9a66System23043612n-h1-789963-20S-1-5-1810/19/2021 12:30:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\cloudbase-init SID (S-1-5-21-1046463506-2987789712-2060206995-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402677Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761996n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100010/19/2021 12:30:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcaSvc service entered the stopped state.7036016384400-91873432398358118402676Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812880n-h1-789963-2010/19/2021 12:30:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy settings for the computer were processed successfully. New settings from 1 Group Policy objects were detected and applied.15020401-92233720368547758082675Microsoft-Windows-GroupPolicyaea1b4fa-97d1-45f2-a64c-4d69fffd92c9System6804080n-h1-789963-20S-1-5-1810/19/2021 12:30:45 AMf817217a-53a1-4270-997e-88ab45721301systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationStartSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The cloudbase-init service entered the running state.7036016384400-91873432398358118402674Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121736n-h1-789963-2010/19/2021 12:30:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user N-H1-789963-20\cloudbase-init SID (S-1-5-21-1046463506-2987789712-2060206995-1000) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402673Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem9761940n-h1-789963-20S-1-5-21-1046463506-2987789712-2060206995-100010/19/2021 12:30:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wuauserv service entered the running state.7036016384400-91873432398358118402672Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121736n-h1-789963-2010/19/2021 12:30:38 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected Devices Platform Service service entered the stopped state.7036016384400-91873432398358118402671Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121736n-h1-789963-2010/19/2021 12:30:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The swprv service entered the running state.7036016384400-91873432398358118402670Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121736n-h1-789963-2010/19/2021 12:30:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:192.168.0.73 has been brought up.42000400-92233720368547758082669Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System6802804n-h1-789963-20S-1-5-1810/19/2021 12:30:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.openstacklocal with address fe80::5efe:10.222.0.74 has been brought up.42000400-92233720368547758082668Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System6802804n-h1-789963-20S-1-5-1810/19/2021 12:30:36 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
This event triggers the TBS device identifier generation.12810400-92233720368547758082667Microsoft-Windows-TPM-WMI7d5387b0-cbe0-11da-a94d-0800200c9a66System6802872n-h1-789963-20S-1-5-1810/19/2021 12:30:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LicenseManager service entered the running state.7036016384400-91873432398358118402666Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SessionEnv service entered the running state.7036016384400-91873432398358118402665Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UmRdpService service entered the running state.7036016384400-91873432398358118402664Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the running state.7036016384400-91873432398358118402663Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
A new self signed certificate to be used for RD Session Host Server authentication on SSL connections was generated. The name on this certificate is n-h1-789963-20. The SHA1 hash of the certificate is in the event data.1056049152400360287970189639682662Microsoft-Windows-TerminalServices-RemoteConnectionManagerc76baa63-ae81-421c-b425-340b4b24157fSystem00n-h1-789963-2010/19/2021 12:30:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TermService service entered the running state.7036016384400-91873432398358118402661Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812880n-h1-789963-2010/19/2021 12:30:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the cloudbase-init service was changed from demand start to auto start.7040016384400-91873432398358118402660Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812880n-h1-789963-20S-1-5-1810/19/2021 12:30:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The KeyIso service entered the running state.7036016384400-91873432398358118402659Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ClipSVC service entered the running state.7036016384400-91873432398358118402658Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmcompute service entered the running state.7036016384400-91873432398358118402657Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442656Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4512n-h1-789963-20S-1-5-1810/19/2021 12:30:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DmEnrollmentSvc service entered the stopped state.7036016384400-91873432398358118402655Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DmEnrollmentSvc service entered the running state.7036016384400-91873432398358118402654Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981442653Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4212n-h1-789963-20S-1-5-1810/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118402652Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121616n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118402651Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121616n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the running state.7036016384400-91873432398358118402650Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118402649Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118402648Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812816n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118402647Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118402646Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118402645Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118402644Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118402643Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812892n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118402642Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812892n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118402641Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121496n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118402640Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8122008n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118402639Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121728n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118402638Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wlidsvc service entered the running state.7036016384400-91873432398358118402637Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639682636Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00n-h1-789963-2010/19/2021 12:30:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402635Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812892n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118402634Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118402633Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121728n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118402632Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121728n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118402631Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121728n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118402630Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121728n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118402629Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121728n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118402628Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121676n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TimeBrokerSvc service entered the running state.7036016384400-91873432398358118402627Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121620n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118402626Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118402625Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).350400-92233720368547758082624Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14601888n-h1-789963-20S-1-5-1910/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).370400-92233720368547758082623Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14601560n-h1-789963-20S-1-5-1910/19/2021 12:30:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402622Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402621Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402620Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402619Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402618Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402617Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121676n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118402616Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402615Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812892n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442614Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4516n-h1-789963-20S-1-5-1810/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402613Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121496n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NcbService service entered the running state.7036016384400-91873432398358118402612Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121732n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442611Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4516n-h1-789963-20S-1-5-1810/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402610Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121612n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442609Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4516n-h1-789963-20S-1-5-1810/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402608Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121676n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppReadiness service entered the running state.7036016384400-91873432398358118402607Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121676n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?10?-?19T00:30:28.107000000Z from ?2021?-?10?-?19T00:30:28.494016000Z. Change Reason: An application or system component changed the time.11450-92233720368547757922606Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14522012n-h1-789963-20S-1-5-1910/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402605Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121676n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402604Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121676n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402603Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8122000n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402602Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121616n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402601Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DsmSvc service entered the running state.7036016384400-91873432398358118402600Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the running state.7036016384400-91873432398358118402599Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402598Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121604n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402597Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121604n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118402596Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121732n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402595Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121624n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522594Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System14521628n-h1-789963-20S-1-5-1910/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402593Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8121604n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522592Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem14521564n-h1-789963-20S-1-5-1910/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402591Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118402590Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402589Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118402588Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:24 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully logged OS information2004044000023059837467020492802587Microsoft-Windows-Setup75ebc33e-997f-49cf-b49f-ecc50184b75dSystem12081212n-h1-789963-20S-1-5-1810/19/2021 12:30:21 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoOS informationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118402586Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppXSvc service entered the running state.7036016384400-91873432398358118402585Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118402584Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushservice service entered the running state.7036016384400-91873432398358118402583Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402582Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118402581Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DeviceInstall service entered the running state.7036016384400-91873432398358118402580Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402579Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402578Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402577Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402576Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812896n-h1-789963-2010/19/2021 12:30:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402575Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402574Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402573Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402572Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System812888n-h1-789963-2010/19/2021 12:30:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082571Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem828832n-h1-789963-20S-1-5-1810/19/2021 12:30:12 AM76aa6708-c480-0005-0d67-aa7680c4d701systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042570Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem700704n-h1-789963-20S-1-5-1810/19/2021 12:30:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082569Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4388n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082568Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082567Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4388n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082566Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082565Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h1-789963-2010/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082564Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4212n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082563Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4212n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082562Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4212n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082561Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00n-h1-789963-2010/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082560Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4212n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082559Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4212n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082558Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4212n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082557Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4388n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082556Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802555Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48n-h1-789963-2010/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802554Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4316n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442553Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-789963-20S-1-5-1810/19/2021 12:30:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682552VfpExtSystemn-h1-789963-2010/19/2021 12:30:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442551Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-789963-20S-1-5-1810/19/2021 12:30:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume C: (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062550Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4212n-h1-789963-20S-1-5-1810/19/2021 12:30:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442549Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-789963-20S-1-5-1810/19/2021 12:30:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442548Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48n-h1-789963-20S-1-5-1810/19/2021 12:30:06 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442547Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48n-h1-789963-20S-1-5-1810/19/2021 12:30:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442546Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-789963-20S-1-5-1810/19/2021 12:30:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442545Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-789963-20S-1-5-1810/19/2021 12:30:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442544Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48n-h1-789963-20S-1-5-1810/19/2021 12:30:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082543Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-789963-20S-1-5-1810/19/2021 12:30:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082542Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-789963-20S-1-5-1810/19/2021 12:30:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082541Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-789963-20S-1-5-1810/19/2021 12:30:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082540Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-789963-20S-1-5-1810/19/2021 12:30:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082539Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-789963-20S-1-5-1810/19/2021 12:30:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082538Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48n-h1-789963-20S-1-5-1810/19/2021 12:30:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2021?-?10?-?19T00:30:05.494734100Z.120410-92233720368547756802537Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48n-h1-789963-20S-1-5-1810/19/2021 12:30:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2021?-?10?-?19T00:29:57.499293400Z.130420-92233720368547756802536Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4188n-h1-789963-2010/19/2021 12:29:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162535Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System696700n-h1-789963-2010/19/2021 12:29:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service entered the stopped state.7036016384400-91873432398358118402534Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892n-h1-789963-2010/19/2021 12:29:52 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system uptime is 22 seconds.60133276840360287970189639682533EventLogSystemn-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682532EventLogSystemn-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682531EventLogSystemn-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetBIOS name and DNS host name of this machine have been changed from WIN-E5J2Q975AV0 to N-H1-789963-20.60113276840360287970189639682530EventLogSystemn-h1-789963-2010/19/2021 12:30:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402529Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892n-h1-789963-2010/19/2021 12:29:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402528Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892n-h1-789963-2010/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402527Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402526Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402525Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402524Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682523EventLogSystemWIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402522Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402521Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402520Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402519Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402518Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402517Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402516Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402515Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081268WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402514Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081340WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?10?-?19T00:29:50.809000000Z from ?2021?-?10?-?19T00:29:50.813722800Z. Change Reason: An application or system component changed the time.11450-92233720368547757922513Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem14882268WIN-5T344G8GM1HS-1-5-1910/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402512Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8082092WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522511Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem13041552WIN-5T344G8GM1HS-1-5-1910/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522510Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System13041604WIN-5T344G8GM1HS-1-5-1910/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Install Service service entered the stopped state.7036016384400-91873432398358118402509Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808900WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402508Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808876WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Device Setup Manager service entered the stopped state.7036016384400-91873432398358118402507Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081384WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HV Host Service service entered the stopped state.7036016384400-91873432398358118402506Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081404WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402505Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808876WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402504Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808876WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402503Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808876WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402502Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808876WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402501Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081400WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\system32\winlogon.exe (WIN-5T344G8GM1H) has initiated the restart of computer WIN-E5J2Q975AV0 on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Upgrade (Planned) Reason Code: 0x80020003 Shutdown Type: restart Comment: 1074032768400-91873432398358118402500User32b0aa8734-56f7-41cc-b2f4-de228e98b946System608760WIN-5T344G8GM1HS-1-5-1810/19/2021 12:29:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is not listening for WS-Management requests. User Action If you did not intentionally stop the service, use the following command to see the WinRM configuration: winrm enumerate winrm/config/listener1014907300360287970189639682499Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00WIN-5T344G8GM1H10/19/2021 12:29:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtual Disk service entered the stopped state.7036016384400-91873432398358118402498Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081400WIN-5T344G8GM1H10/19/2021 12:29:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service stopped.41689640360287970189639682497Virtual Disk ServiceSystemWIN-5T344G8GM1H10/19/2021 12:29:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtual Disk service entered the running state.7036016384400-91873432398358118402496Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081340WIN-5T344G8GM1H10/19/2021 12:29:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Service started.31689640360287970189639682495Virtual Disk ServiceSystemWIN-5T344G8GM1H10/19/2021 12:29:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402494Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081340WIN-5T344G8GM1H10/19/2021 12:29:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \??\C:\windows\System32\SMI\Store\Machine\SCHEMA.DAT was reorganized with a starting size of 12853248 bytes and an ending size of 11681792 bytes.150400-92233720368547758082493Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11881192WIN-5T344G8GM1HS-1-5-1810/19/2021 12:29:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \??\C:\windows\System32\config\COMPONENTS was reorganized with a starting size of 71872512 bytes and an ending size of 56864768 bytes.150400-92233720368547758082492Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11881192WIN-5T344G8GM1HS-1-5-1810/19/2021 12:29:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402491Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081340WIN-5T344G8GM1H10/19/2021 12:28:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.PrintDialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082490Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122916WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Windows.MiracastView_6.3.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082489Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122916WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082488Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122916WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.XboxGameCallableUI_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082487Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122916WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.ShellExperienceHost_10.0.14393.1715_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082486Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122916WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082485Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122916WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082484Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122916WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time service is now synchronizing the system time with the time source time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).350400-92233720368547758082483Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14881544WIN-5T344G8GM1HS-1-5-1910/19/2021 12:28:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.CloudExperienceHost_10.0.14393.1066_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082482Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122916WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.AssignedAccessLockApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082481Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122916WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:44 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.Windows.Apprep.ChxApp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082480Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122916WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:43 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.LockApp_10.0.14393.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082479Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122916WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\AppCompat\Programs\Amcache.hve was cleared updating 629 keys and creating 196 modified pages.160400-92233720368547758082478Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem21522504WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.BioEnrollment_10.0.14393.0_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082477Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122916WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:42 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AccountsControl_10.0.14393.1715_neutral__cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082476Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122916WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:41 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\ProgramData\Microsoft\Windows\AppRepository\Packages\Microsoft.AAD.BrokerPlugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy\ActivationStore.dat was cleared updating 0 keys and creating 0 modified pages.160400-92233720368547758082475Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem11122924WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Account Sign-in Assistant service entered the running state.7036016384400-91873432398358118402474Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081400WIN-5T344G8GM1H10/19/2021 12:28:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver wvmbusvideo.inf_amd64_1f06cc897822eef5\wvmbusvideo.inf for Device Instance ID VMBUS\{DA0A7802-E377-4AAC-8E77-0558EB1073F8}\{5620E0C7-8062-4DCE-AEB7-520C7EF76171} with the following status: 0x0.200010470050-92233720368547758082473Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25202576WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service HyperVideo for Device Instance ID VMBUS\{DA0A7802-E377-4AAC-8E77-0558EB1073F8}\{5620E0C7-8062-4DCE-AEB7-520C7EF76171} with the following status: 0.200030470050-92233720368547758082472Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25202576WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:37 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver msports.inf_amd64_280f71b0b084cc3b\msports.inf for Device Instance ID ACPI\PNP0501\2 with the following status: 0x0.200010470050-92233720368547758082471Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25282568WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serenum for Device Instance ID ACPI\PNP0501\2 with the following status: 0.200030470050-92233720368547758082470Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25282568WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serial for Device Instance ID ACPI\PNP0501\2 with the following status: 0.200030470050-92233720368547758082469Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25282568WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management concluded the process to install driver msports.inf_amd64_280f71b0b084cc3b\msports.inf for Device Instance ID ACPI\PNP0501\1 with the following status: 0x0.200010470050-92233720368547758082468Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25122572WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Time Broker service entered the running state.7036016384400-91873432398358118402467Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081400WIN-5T344G8GM1H10/19/2021 12:28:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serenum for Device Instance ID ACPI\PNP0501\1 with the following status: 0.200030470050-92233720368547758082466Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25122572WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Driver Management has concluded the process to add Service Serial for Device Instance ID ACPI\PNP0501\1 with the following status: 0.200030470050-92233720368547758082465Microsoft-Windows-UserPnp96f4a050-7e31-453c-88be-9634f4e02139System25122572WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Host Compute Service service entered the running state.7036016384400-91873432398358118402464Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081340WIN-5T344G8GM1H10/19/2021 12:28:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442463Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem432WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The time provider NtpClient is currently receiving valid time data from time.windows.com,0x8 (ntp.m|0x8|0.0.0.0:123->20.101.57.9:123).370400-92233720368547758082462Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem14881544WIN-5T344G8GM1HS-1-5-1910/19/2021 12:28:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (Version 10.0, ?1978?-?03?-?07T02:59:33.000000000Z) unloaded successfully.11400-92233016681105981442461Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem432WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:31 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DiagTrack service entered the running state.7036016384400-91873432398358118402460Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081392WIN-5T344G8GM1H10/19/2021 12:28:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinDefend service entered the running state.7036016384400-91873432398358118402459Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081392WIN-5T344G8GM1H10/19/2021 12:28:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmms service entered the running state.7036016384400-91873432398358118402458Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081392WIN-5T344G8GM1H10/19/2021 12:28:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The following boot-start or system-start driver(s) did not load: dam7026049152400-91873432398358118402457Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808812WIN-5T344G8GM1H10/19/2021 12:28:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the stopped state.7036016384400-91873432398358118402456Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081392WIN-5T344G8GM1H10/19/2021 12:28:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WpnService service entered the running state.7036016384400-91873432398358118402455Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081392WIN-5T344G8GM1H10/19/2021 12:28:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service entered the running state.7036016384400-91873432398358118402454Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081392WIN-5T344G8GM1H10/19/2021 12:28:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanServer service entered the running state.7036016384400-91873432398358118402453Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081392WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service terminated with the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.7023049152200-91873432398358118402452Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081392WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The iphlpsvc service entered the stopped state.7036016384400-91873432398358118402451Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081392WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The W32Time service entered the running state.7036016384400-91873432398358118402450Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081392WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RemoteRegistry service entered the running state.7036016384400-91873432398358118402449Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081424WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TrkWks service entered the running state.7036016384400-91873432398358118402448Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081424WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WLMS service entered the running state.7036016384400-91873432398358118402447Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081396WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The UserManager service entered the running state.7036016384400-91873432398358118402446Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8082092WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PcaSvc service entered the running state.7036016384400-91873432398358118402445Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808900WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CryptSvc service entered the running state.7036016384400-91873432398358118402444Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8082096WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Spooler service entered the running state.7036016384400-91873432398358118402443Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SamSs service entered the running state.7036016384400-91873432398358118402442Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MpsSvc service entered the running state.7036016384400-91873432398358118402441Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BFE service entered the running state.7036016384400-91873432398358118402440Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinHttpAutoProxySvc service entered the running state.7036016384400-91873432398358118402439Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LanmanWorkstation service entered the running state.7036016384400-91873432398358118402438Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808900WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinRM service is listening for WS-Management requests. User Action Use the following command to see the specific IPs on which WinRM is listening: winrm enumerate winrm/config/listener1014807400360287970189639682437Microsoft-Windows-WinRMa7975c8f-ac13-49f1-87da-5a984a4ab417System00WIN-5T344G8GM1H10/19/2021 12:28:30 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WbioSrvc service entered the running state.7036016384400-91873432398358118402436Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Wcmsvc service entered the running state.7036016384400-91873432398358118402435Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081280WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The wudfsvc service entered the running state.7036016384400-91873432398358118402434Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081392WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The FontCache service entered the running state.7036016384400-91873432398358118402433Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081392WIN-5T344G8GM1H10/19/2021 12:28:29 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ShellHWDetection service entered the running state.7036016384400-91873432398358118402432Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081392WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dnscache service entered the running state.7036016384400-91873432398358118402431Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081280WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WinTarget service entered the running state.7036016384400-91873432398358118402430Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Schedule service entered the running state.7036016384400-91873432398358118402429Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808900WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service terminated with the following error: The device is not ready.7023049152200-91873432398358118402428Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808888WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The netprofm service entered the stopped state.7036016384400-91873432398358118402427Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808888WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The gpsvc service entered the running state.7036016384400-91873432398358118402426Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NlaSvc service entered the running state.7036016384400-91873432398358118402425Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808900WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The ProfSvc service entered the running state.7036016384400-91873432398358118402424Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808900WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SENS service entered the running state.7036016384400-91873432398358118402423Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Winmgmt service entered the running state.7036016384400-91873432398358118402422Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service entered the running state.7036016384400-91873432398358118402421Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808900WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Dhcp service entered the running state.7036016384400-91873432398358118402420Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808900WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The WPDBusEnum service entered the running state.7036016384400-91873432398358118402419Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808900WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is started510460446223058430092136939522418Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System13041604WIN-5T344G8GM1HS-1-5-1910/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicheartbeat service entered the running state.7036016384400-91873432398358118402417Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicrdv service entered the running state.7036016384400-91873432398358118402416Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is started500360446823058430092136939522415Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem13041552WIN-5T344G8GM1HS-1-5-1910/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStartService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicvss service entered the running state.7036016384400-91873432398358118402414Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:28 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem service entered the running state.7036016384400-91873432398358118402413Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The nsi service entered the running state.7036016384400-91873432398358118402412Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventLog service entered the running state.7036016384400-91873432398358118402411Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Themes service entered the running state.7036016384400-91873432398358118402410Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081264WIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'storqosflt' (10.0, ?2018?-?01?-?01T04:48:05.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442409Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4584WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'wcifs' (10.0, ?2018?-?01?-?01T04:48:57.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442408Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4584WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'luafv' (10.0, ?2017?-?11?-?01T22:09:40.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442407Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem4584WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2021?-?10?-?19T00:28:27.765000000Z from ?2021?-?10?-?19T00:28:27.618529500Z. Change Reason: An application or system component changed the time.11450-92233720368547757922406Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem13041432WIN-5T344G8GM1HS-1-5-1910/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmickvpexchange service entered the running state.7036016384400-91873432398358118402405Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808888WIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmictimesync service entered the running state.7036016384400-91873432398358118402404Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808888WIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The vmicshutdown service entered the running state.7036016384400-91873432398358118402403Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081424WIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The lmhosts service entered the running state.7036016384400-91873432398358118402402Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The HvHost service entered the running state.7036016384400-91873432398358118402401Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081340WIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DsmSvc service entered the running state.7036016384400-91873432398358118402400Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System8081292WIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\BBI was cleared updating 10 keys and creating 2 modified pages.160400-92233720368547758082399Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem916384WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The BrokerInfrastructure service entered the running state.7036016384400-91873432398358118402398Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The tiledatamodelsvc service entered the running state.7036016384400-91873432398358118402397Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:28:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppXSvc service entered the running state.7036016384400-91873432398358118402396Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:28:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The StateRepository service entered the running state.7036016384400-91873432398358118402395Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:28:20 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' restarted110410030-92233720368547758082394Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4472WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter #2' was successfully initialized30410020-92233720368547758082393Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' connected120410030-92233720368547758082392Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00WIN-5T344G8GM1H10/19/2021 12:28:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082391Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' restarted110410030-92233720368547758082390Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4136WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The miniport 'Microsoft Hyper-V Network Adapter' was successfully initialized30410020-92233720368547758082389Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter' connected120410030-92233720368547758082388Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem00WIN-5T344G8GM1H10/19/2021 12:28:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VM and host networking components successfully negotiated protocol version '6.1'10410010-92233720368547758082387Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem4188WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The dmwappushservice service entered the running state.7036016384400-91873432398358118402386Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:28:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CoreMessagingRegistrar service entered the running state.7036016384400-91873432398358118402385Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:28:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetSetupSvc service entered the running state.7036016384400-91873432398358118402384Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:28:19 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DeviceInstall service entered the running state.7036016384400-91873432398358118402383Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:28:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The SystemEventsBroker service entered the running state.7036016384400-91873432398358118402382Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:28:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The sppsvc service entered the running state.7036016384400-91873432398358118402381Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:28:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The LSM service entered the running state.7036016384400-91873432398358118402380Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808892WIN-5T344G8GM1H10/19/2021 12:28:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcSs service entered the running state.7036016384400-91873432398358118402379Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808900WIN-5T344G8GM1H10/19/2021 12:28:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The RpcEptMapper service entered the running state.7036016384400-91873432398358118402378Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DcomLaunch service entered the running state.7036016384400-91873432398358118402377Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Power service entered the running state.7036016384400-91873432398358118402376Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The PlugPlay service entered the running state.7036016384400-91873432398358118402375Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System808896WIN-5T344G8GM1H10/19/2021 12:28:18 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Remote calls to the SAM database are being restricted using the default security descriptor: O:SYG:SYD:(A;;RC;;;BA). For more information please see http://go.microsoft.com/fwlink/?LinkId=787651.169620400-92233720368547758082374Microsoft-Windows-Directory-Services-SAM0d4fdc09-8c27-494a-bda0-505e4fd8adaeSystem824828WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:17 AM28211e11-c480-0005-161e-212880c4d701systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Credential Guard (LsaIso.exe) configuration: 0x0, 014040046116860184273879042373Microsoft-Windows-Wininit206f6dea-d3c5-4d10-bc72-989f03c8b84bSystem696700WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:16 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Default\NTUSER.DAT was cleared updating 126 keys and creating 18 modified pages.160400-92233720368547758082372Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Administrator\AppData\Local\Microsoft\Windows\UsrClass.dat was cleared updating 628 keys and creating 85 modified pages.160400-92233720368547758082371Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\Users\Administrator\NTUSER.DAT was cleared updating 1935 keys and creating 116 modified pages.160400-92233720368547758082370Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\ServiceProfiles\NetworkService\NTUSER.DAT was cleared updating 128 keys and creating 20 modified pages.160400-92233720368547758082369Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \??\C:\windows\ServiceProfiles\LocalService\NTUSER.DAT was cleared updating 137 keys and creating 21 modified pages.160400-92233720368547758082368Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem568572WIN-5T344G8GM1HS-1-5-1810/19/2021 12:28:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\SAM was cleared updating 80 keys and creating 7 modified pages.160400-92233720368547758082367Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4548WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\SECURITY was cleared updating 87 keys and creating 5 modified pages.160400-92233720368547758082366Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4532WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \SystemRoot\System32\Config\DEFAULT was cleared updating 229 keys and creating 27 modified pages.160400-92233720368547758082365Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4544WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \SystemRoot\System32\Config\SOFTWARE was reorganized with a starting size of 78917632 bytes and an ending size of 74686464 bytes.150400-92233720368547758082364Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem4536WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The access history in hive \Device\HarddiskVolume1\Boot\BCD was cleared updating 82 keys and creating 1 modified pages.160400-92233720368547758082363Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem484488WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hive \SystemRoot\System32\config\DRIVERS was reorganized with a starting size of 5177344 bytes and an ending size of 5169152 bytes.150400-92233720368547758082362Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem432WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:56 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 5 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082361Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 4 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082360Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 3 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082359Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 2 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082358Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 1 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082357Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Processor 0 in group 0 exposes the following power management capabilities: Idle state type: ACPI Idle (C) States (1 state(s)) Performance state type: None Nominal Frequency (MHz): 1995 Maximum performance percentage: 100 Minimum performance percentage: 100 Minimum throttle percentage: 1005504470-92233720368547758082356Microsoft-Windows-Kernel-Processor-Power0f67e49f-fe51-4e9f-b490-6f2948cc6027System4188WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system has been constrained to a periodic tick Reason: No HW support.508041590-92233720368547747802355Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System48WIN-5T344G8GM1H10/19/2021 12:27:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Connectivity state in standby: Disconnected, Reason: NIC compliance172042030-92233720368547747802354Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System4376WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'npsvctrig' (10.0, ?2016?-?07?-?16T02:28:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442353Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The service entered the Driver load complete state.70361638440360287970189639682352VfpExtSystemWIN-5T344G8GM1H10/19/2021 12:27:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'FileCrypt' (10.0, ?2016?-?07?-?16T02:22:39.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442351Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume \\?\Volume{be07386b-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) is healthy. No action is needed.980400-92233720368547758062350Microsoft-Windows-Ntfs3ff37a1c-a68d-4d6e-8c9b-f79e8b16c482System4188WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'WdFilter' (10.0, ?1978?-?03?-?07T02:59:33.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442349Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
File System Filter 'Wof' (10.0, ?2017?-?10?-?09T01:58:20.000000000Z) has successfully loaded and registered with Filter Manager.61400-92233016681105981442348Microsoft-Windows-FilterManagerf3c5e28e-63f6-49c7-a204-e48a1bc4b09dSystem48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:54 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Secure Kernel started with status STATUS_SUCCESS and flags 0.30400-92233016681105981442347Microsoft-Windows-IsolatedUserMode73a33ab2-1966-4999-8add-868c41415269System48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor initialized I/O remapping. Hardware present: false Hardware enabled: false Policy: 0x0 Enabled features: 0x0 Internal information: 0x0 Problems: 0x0 Additional information: 0x01290400-92233016681105981442346Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor scheduler type is 0x1.20400-92233016681105981442345Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hypervisor successfully started.10400-92233016681105981442344Microsoft-Windows-Hyper-V-Hypervisor52fc89f8-995e-434c-a91e-199986449890System48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The bootmgr spent 0 ms waiting for user input.320400-92233720368547758082343Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
There are 0x1 boot options on this system.180400-92233720368547758082342Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot menu policy was 0x0.2504320-92233720368547758082341Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The boot type was 0x0.2714330-92233720368547758082340Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The last shutdown's success status was true. The last boot's success status was true.2004310-92233720368547758082339Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Virtualization Based Security (policies: VBS Enabled,VSM Required,Boot Chain Signer Soft Enforced) is enabled due to HyperV with status STATUS_SUCCESS.1530400-92233720368547758082338Microsoft-Windows-Kernel-Boot15ca44ff-4d7a-4baa-bba5-0998955e531eSystem48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system started at system time ?2021?-?10?-?19T00:27:53.489367600Z.120410-92233720368547756802337Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem48WIN-5T344G8GM1HS-1-5-1810/19/2021 12:27:53 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The operating system is shutting down at system time ?2018?-?01?-?19T09:48:14.082208700Z.130420-92233720368547756802336Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem42896WIN-5T344G8GM1H1/19/2018 9:48:14 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The kernel power manager has initiated a shutdown transition. Shutdown Reason: Kernel API109041030-92233016681105971162335Microsoft-Windows-Kernel-Power331c3b3a-2005-44c2-ac5e-77220c37d6b4System520524WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Defender Service service entered the stopped state.7036016384400-91873432398358118402334Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was started.60053276840360287970189639682333EventLogSystemWIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free.60093276840360287970189639682332EventLogSystemWIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The NetBIOS name and DNS host name of this machine have been changed from WIN-5T344G8GM1H to WIN-E5J2Q975AV0.60113276840360287970189639682331EventLogSystemWIN-5T344G8GM1H10/19/2021 12:28:27 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Task Scheduler service entered the stopped state.7036016384400-91873432398358118402330Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Event Log service entered the stopped state.7036016384400-91873432398358118402329Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Remote Management (WS-Management) service entered the stopped state.7036016384400-91873432398358118402328Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the stopped state.7036016384400-91873432398358118402327Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Volume Shadow Copy service entered the stopped state.7036016384400-91873432398358118402326Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The State Repository Service service entered the stopped state.7036016384400-91873432398358118402325Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Cryptographic Services service entered the stopped state.7036016384400-91873432398358118402324Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Font Cache Service service entered the stopped state.7036016384400-91873432398358118402323Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft iSCSI Target Server service entered the stopped state.7036016384400-91873432398358118402322Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Program Compatibility Assistant Service service entered the stopped state.7036016384400-91873432398358118402321Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Diagnostic Policy Service service entered the stopped state.7036016384400-91873432398358118402320Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Link Tracking Client service entered the stopped state.7036016384400-91873432398358118402319Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656956WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services service entered the stopped state.7036016384400-91873432398358118402318Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft Software Shadow Copy Provider service entered the stopped state.7036016384400-91873432398358118402317Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Connection Manager service entered the stopped state.7036016384400-91873432398358118402316Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Licensing Monitoring Service service entered the stopped state.7036016384400-91873432398358118402315Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656748WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service service entered the stopped state.7036016384400-91873432398358118402314Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Services UserMode Port Redirector service entered the stopped state.7036016384400-91873432398358118402313Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561100WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Management Instrumentation service entered the stopped state.7036016384400-91873432398358118402312Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656416WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Time service entered the stopped state.7036016384400-91873432398358118402311Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656416WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The system time has changed to ?2018?-?01?-?19T09:48:13.152000000Z from ?2018?-?01?-?19T09:48:13.164762500Z. Change Reason: An application or system component changed the time.11450-92233720368547757922310Microsoft-Windows-Kernel-Generala68ca8b7-004f-d7b6-a698-07e2de0f1f5dSystem12442300WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Credential Manager service entered the stopped state.7036016384400-91873432398358118402309Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561080WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402308Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6562116WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The DHCP Client service entered the stopped state.7036016384400-91873432398358118402307Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561048WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv4 client service is stopped. ShutDown Flag value is 1500370446923058430092136939522306Microsoft-Windows-Dhcp-Client15a7a4f8-0072-4eab-abad-f98a4d666aedSystem4361300WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
DHCPv6 client service is stopped. ShutDown Flag value is 1510470446323058430092136939522305Microsoft-Windows-DHCPv6-Client6a1f2b00-6a90-4c38-95a5-5cab3b056778System4361360WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationServiceStopService State EventSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Plug and Play service entered the stopped state.7036016384400-91873432398358118402304Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Volume Shadow Copy Requestor service entered the stopped state.7036016384400-91873432398358118402303Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Tile Data model server service entered the stopped state.7036016384400-91873432398358118402302Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Modules Installer service entered the stopped state.7036016384400-91873432398358118402301Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Group Policy Client service entered the stopped state.7036016384400-91873432398358118402300Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Hyper-V Virtual Machine Management service entered the stopped state.7036016384400-91873432398358118402299Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
User Logoff Notification for Customer Experience Improvement Program7002041102023058781935857827842298Microsoft-Windows-Winlogondbe9b383-7cf3-4331-91cc-a3cb16a3b538System584916WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Event log service was stopped.60063276840360287970189639682297EventLogSystemWIN-5T344G8GM1H1/19/2018 9:48:13 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The CDPUserSvc_24762 service entered the stopped state.7036016384400-91873432398358118402296Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561040WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Sync Host_24762 service entered the stopped state.7036016384400-91873432398358118402295Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} and APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} to the user NT AUTHORITY\SYSTEM SID (S-1-5-18) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.1001600200-91873432398358118402294Microsoft-Windows-DistributedCOM1b562e86-b7aa-4131-badc-b6f3a001407eSystem820972WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Certificate Propagation service entered the stopped state.7036016384400-91873432398358118402293Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Remote Desktop Configuration service entered the stopped state.7036016384400-91873432398358118402292Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The process C:\windows\System32\Sysprep\Sysprep.exe (WIN-5T344G8GM1H) has initiated the shutdown of computer WIN-5T344G8GM1H on behalf of user WIN-5T344G8GM1H\Administrator for the following reason: No title for this reason could be found Reason Code: 0x40002 Shutdown Type: shutdown Comment: 1074032768400-91873432398358118402291User32b0aa8734-56f7-41cc-b2f4-de228e98b946System448464WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Process C:\Windows\System32\Sysprep\sysprep.exe (process ID:4012) reset policy scheme from {381B4222-F694-41F0-9685-FF5BB260DF2E} to {381B4222-F694-41F0-9685-FF5BB260DF2E}120410046116860184273879042290Microsoft-Windows-UserModePowerServicece8dee0b-d539-4000-b0f8-77bed049c590System764316WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:12 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the running state.7036016384400-91873432398358118402289Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the stopped state.7036016384400-91873432398358118402288Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Connected User Experiences and Telemetry service entered the stopped state.7036016384400-91873432398358118402287Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)1340300-92233720368547758082286Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem12441320WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:11 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Client License Service (ClipSVC) service entered the running state.7036016384400-91873432398358118402285Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:10 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service entered the running state.7036016384400-91873432398358118402284Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the stopped state.7036016384400-91873432398358118402283Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TCP/IP NetBIOS Helper service entered the stopped state.7036016384400-91873432398358118402282Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System6561104WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The TCP/IP NetBIOS Helper service was successfully sent a stop control. The reason specified was: 0x40030011 [Operating System: Network Connectivity (Planned)] Comment: None7042016384400-91873432398358118402281Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656948WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport Teredo Tunneling Pseudo-Interface, {8A97E6D0-A2AF-48AE-8BC2-FFC865CC4DF6}, had event Network Interface deleted while PNP Device still exists. Note that this event is provided for informational purpose and might not be an error always (Eg: In case of vSwitch which was recently un-installed or a LBFO team was removed)10317022023058430092137103582280Microsoft-Windows-NDIScdead503-17f5-4a3e-b7ae-df8cc2902eb9System9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AM8a97e6d0-a2af-48ae-8bc2-ffc865cc4df6systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoPnPSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' is halting60410030-92233720368547758082279Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem41984WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport Microsoft Hyper-V Network Adapter #2, {518CDFA4-5492-4D9E-BEAA-908825A4A289}, had event Network Interface deleted while PNP Device still exists. Note that this event is provided for informational purpose and might not be an error always (Eg: In case of vSwitch which was recently un-installed or a LBFO team was removed)10317022023058430092137103582278Microsoft-Windows-NDIScdead503-17f5-4a3e-b7ae-df8cc2902eb9System9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AM518cdfa4-5492-4d9e-beaa-908825a4a289systemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkErrorInfoPnPSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
NtpClient was unable to set a manual peer to use as a time source because of DNS resolution error on 'time.windows.com,0x8'. NtpClient will try again in 15 minutes and double the reattempt interval thereafter. The error was: No such host is known. (0x80072AF9)1340300-92233720368547758082277Microsoft-Windows-Time-Service06edcfeb-0fd0-4e53-acca-a6f8bbf81bcbSystem12441800WIN-5T344G8GM1HS-1-5-191/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkWarningInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Isatap interface isatap.{518CDFA4-5492-4D9E-BEAA-908825A4A289} is no longer active.42010400-92233720368547758082276Microsoft-Windows-Iphlpsvc66a5c15c-4f8e-4044-bf6e-71d896038977System9761376WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Miniport NIC 'Microsoft Hyper-V Network Adapter #2' paused100410030-92233720368547758082275Microsoft-Windows-Hyper-V-Netvsc152fbe4b-c7ad-4f68-bada-a4fcc1464f6cSystem9763116WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Network Setup Service service entered the running state.7036016384400-91873432398358118402274Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Microsoft-Windows-Kernel-PnP/Configuration log file was cleared.104041040-92233720368547758082273Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:48:09 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the VIA StorX Storage RAID Controller Windows Driver service was changed from demand start to boot start.7040016384400-91873432398358118402272Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the vsmraid service was changed from demand start to boot start.7040016384400-91873432398358118402271Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:07 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Universal Flash Storage (UFS) Driver service was changed from demand start to boot start.7040016384400-91873432398358118402270Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Standard NVM Express Driver service was changed from demand start to boot start.7040016384400-91873432398358118402269Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the stexstor service was changed from demand start to boot start.7040016384400-91873432398358118402268Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SiSRaid4 service was changed from demand start to boot start.7040016384400-91873432398358118402267Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SiSRaid2 service was changed from demand start to boot start.7040016384400-91873432398358118402266Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:05 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Storage Class Memory Bus Driver service was changed from demand start to boot start.7040016384400-91873432398358118402265Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the SBP-2 Transport/Protocol Bus Driver service was changed from demand start to boot start.7040016384400-91873432398358118402264Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic [FCoE] STOR Miniport Inbox Driver (wx64) service was changed from demand start to boot start.7040016384400-91873432398358118402263Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic iSCSI Miniport Inbox Driver service was changed from demand start to boot start.7040016384400-91873432398358118402262Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Fibre Channel STOR Miniport Inbox Driver (wx64) service was changed from demand start to boot start.7040016384400-91873432398358118402261Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:04 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the percsas3i service was changed from demand start to boot start.7040016384400-91873432398358118402260Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the percsas2i service was changed from demand start to boot start.7040016384400-91873432398358118402259Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the pcmcia service was changed from demand start to boot start.7040016384400-91873432398358118402258Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nvraid service was changed from demand start to boot start.7040016384400-91873432398358118402257Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:03 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the nvstor service was changed from demand start to boot start.7040016384400-91873432398358118402256Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:48:02 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic 10 Gigabit Ethernet Adapter VBD service was changed from demand start to boot start.7040016384400-91873432398358118402255Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Network Adapter VBD service was changed from demand start to boot start.7040016384400-91873432398358118402254Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:59 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the mvumis service was changed from demand start to boot start.7040016384400-91873432398358118402253Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft Standard SATA AHCI Driver service was changed from demand start to boot start.7040016384400-91873432398358118402252Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:58 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the pciide service was changed from demand start to boot start.7040016384400-91873432398358118402251Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:57 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasr service was changed from demand start to boot start.7040016384400-91873432398358118402250Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasas2i service was changed from demand start to boot start.7040016384400-91873432398358118402249Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the megasas service was changed from demand start to boot start.7040016384400-91873432398358118402248Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:55 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the isapnp service was changed from demand start to boot start.7040016384400-91873432398358118402247Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SSS service was changed from demand start to boot start.7040016384400-91873432398358118402246Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:51 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS3i service was changed from demand start to boot start.7040016384400-91873432398358118402245Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS2i service was changed from demand start to boot start.7040016384400-91873432398358118402244Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the LSI_SAS service was changed from demand start to boot start.7040016384400-91873432398358118402243Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:50 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Intel RAID Controller Windows 7 service was changed from demand start to boot start.7040016384400-91873432398358118402242Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Intel(R) SATA RAID Controller Windows service was changed from demand start to boot start.7040016384400-91873432398358118402241Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the HpSAMD service was changed from demand start to boot start.7040016384400-91873432398358118402240Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:49 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the elxstor service was changed from demand start to boot start.7040016384400-91873432398358118402239Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the elxfcoe service was changed from demand start to boot start.7040016384400-91873432398358118402238Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Microsoft driver for storage devices supporting IEEE 1667 and TCG protocols service was changed from demand start to boot start.7040016384400-91873432398358118402237Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:48 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the cht4iscsi service was changed from demand start to boot start.7040016384400-91873432398358118402236Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic Offload iSCSI Driver service was changed from demand start to boot start.7040016384400-91873432398358118402235Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:47 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the QLogic FCoE Offload driver service was changed from demand start to boot start.7040016384400-91873432398358118402234Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the bfadfcoei service was changed from demand start to boot start.7040016384400-91873432398358118402233Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the bfadi service was changed from demand start to boot start.7040016384400-91873432398358118402232Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the Adaptec SAS/SATA-II RAID Storport's Miniport Driver service was changed from demand start to boot start.7040016384400-91873432398358118402231Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:46 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdsbs service was changed from demand start to boot start.7040016384400-91873432398358118402230Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdxata service was changed from demand start to boot start.7040016384400-91873432398358118402229Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the amdsata service was changed from demand start to boot start.7040016384400-91873432398358118402228Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the ADP80XX service was changed from demand start to boot start.7040016384400-91873432398358118402227Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The start type of the 3ware service was changed from demand start to boot start.7040016384400-91873432398358118402226Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1HS-1-5-181/19/2018 9:47:45 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Update Orchestrator Service for Windows Update service entered the stopped state.7036016384400-91873432398358118402225Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:40 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Windows Update service entered the stopped state.7036016384400-91873432398358118402224Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Access Logging Service service entered the stopped state.7036016384400-91873432398358118402223Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:35 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Distributed Transaction Coordinator service entered the stopped state.7036016384400-91873432398358118402222Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:34 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The AppX Deployment Service (AppXSVC) service entered the running state.7036016384400-91873432398358118402221Service Control Manager555908d1-a6d7-4695-8e1e-26931d2012f4System656732WIN-5T344G8GM1H1/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Setup log file was cleared.104041040-92233720368547758082220Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Application log file was cleared.104041040-92233720368547758082219Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The System log file was cleared.104041040-92233720368547758082218Microsoft-Windows-Eventlogfc65ddd8-d6ef-4962-83d5-6e5cfe9ce148System4361136WIN-5T344G8GM1HS-1-5-21-416071247-492812682-1642729393-5001/19/2018 9:47:33 AMsystemSystem.UInt32[]System.Diagnostics.Eventing.Reader.EventBookmarkInformationInfoLog clearSystem.Collections.ObjectModel.ReadOnlyCollection`1[System.String]System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]