Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	857	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:37:17 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T16:36:17Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	856	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:37:17 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	855	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:36:47 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257581 minutes.	1037	0	32768	4	0	0	36028797018963968	854	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:36:47 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257581)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	853	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:36:47 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	852	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:36:47 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	851	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:36:47 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	850	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:07:17 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T16:06:17Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	849	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:07:17 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	848	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:06:47 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257611 minutes.	1037	0	32768	4	0	0	36028797018963968	847	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:06:47 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257611)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	846	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:06:47 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	845	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:06:47 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	844	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:06:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	843	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:37:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T15:36:16Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	842	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:37:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	841	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:36:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257641 minutes.	1037	0	32768	4	0	0	36028797018963968	840	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:36:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257641)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	839	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:36:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	838	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:36:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	837	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:36:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	836	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:07:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T15:06:16Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	835	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:07:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	834	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:06:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257671 minutes.	1037	0	32768	4	0	0	36028797018963968	833	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:06:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257671)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	832	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:06:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	831	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:06:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	830	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:06:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	829	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:37:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T14:36:16Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	828	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:37:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	827	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:36:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257701 minutes.	1037	0	32768	4	0	0	36028797018963968	826	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:36:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257701)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	825	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:36:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	824	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:36:46 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	823	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:36:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	822	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:07:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T14:06:15Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	821	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:07:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	820	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:06:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257731 minutes.	1037	0	32768	4	0	0	36028797018963968	819	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:06:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257731)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	818	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:06:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	817	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:06:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	816	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:06:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	815	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:37:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T13:36:15Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	814	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:37:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	813	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:36:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257761 minutes.	1037	0	32768	4	0	0	36028797018963968	812	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:36:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257761)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	811	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:36:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	810	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:36:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	809	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:36:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	808	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:07:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T13:06:15Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	807	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:07:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	806	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:06:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257791 minutes.	1037	0	32768	4	0	0	36028797018963968	805	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:06:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257791)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	804	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:06:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	803	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:06:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	802	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:06:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	801	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:37:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T12:36:15Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	800	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:37:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	799	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:36:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257821 minutes.	1037	0	32768	4	0	0	36028797018963968	798	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:36:44 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257821)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	797	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:36:44 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	796	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:36:44 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	795	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:36:44 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	794	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:07:14 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T12:06:14Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	793	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:07:14 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	792	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:06:44 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257851 minutes.	1037	0	32768	4	0	0	36028797018963968	791	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:06:44 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257851)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	790	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:06:44 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	789	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:06:44 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	788	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:06:44 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	787	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:37:14 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T11:36:14Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	786	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:37:14 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	785	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:36:44 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257881 minutes.	1037	0	32768	4	0	0	36028797018963968	784	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:36:44 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257881)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	783	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:36:44 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	782	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:36:44 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	781	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:36:44 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	780	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:07:14 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T11:06:14Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	779	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:07:14 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	778	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:06:44 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257911 minutes.	1037	0	32768	4	0	0	36028797018963968	777	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:06:44 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257911)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	776	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:06:44 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	775	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:06:44 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	774	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 11:06:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	773	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:37:13 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T10:36:13Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	772	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:37:13 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	771	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:36:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257941 minutes.	1037	0	32768	4	0	0	36028797018963968	770	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:36:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257941)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	769	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:36:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	768	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:36:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	767	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:36:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	766	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:07:13 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T10:06:13Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	765	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:07:13 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	764	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:06:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 257971 minutes.	1037	0	32768	4	0	0	36028797018963968	763	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:06:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 257971)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	762	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:06:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	761	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:06:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	760	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 10:06:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	759	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:37:13 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T09:36:13Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	758	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:37:13 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	757	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:36:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258001 minutes.	1037	0	32768	4	0	0	36028797018963968	756	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:36:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258001)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	755	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:36:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	754	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:36:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	753	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:36:43 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	752	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:07:13 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T09:06:12Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	751	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:07:12 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	750	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:06:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258031 minutes.	1037	0	32768	4	0	0	36028797018963968	749	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:06:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258031)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	748	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:06:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	747	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:06:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	746	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 9:06:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	745	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:37:12 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T08:36:12Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	744	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:37:12 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	743	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:36:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258061 minutes.	1037	0	32768	4	0	0	36028797018963968	742	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:36:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258061)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	741	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:36:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	740	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:36:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	739	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:36:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	738	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:07:12 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T08:06:12Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	737	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:07:12 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	736	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:06:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258091 minutes.	1037	0	32768	4	0	0	36028797018963968	735	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:06:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258091)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	734	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:06:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	733	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:06:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	732	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 8:06:42 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	731	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:37:12 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T07:36:12Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	730	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:37:12 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	729	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:36:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258121 minutes.	1037	0	32768	4	0	0	36028797018963968	728	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:36:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258121)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	727	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:36:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	726	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:36:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	725	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:36:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	724	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:07:11 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T07:06:11Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	723	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:07:11 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	722	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:06:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258151 minutes.	1037	0	32768	4	0	0	36028797018963968	721	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:06:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258151)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	720	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:06:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	719	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:06:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	718	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 7:06:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	717	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:37:11 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T06:36:11Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	716	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:37:11 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	715	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:36:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258181 minutes.	1037	0	32768	4	0	0	36028797018963968	714	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:36:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258181)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	713	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:36:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	712	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:36:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	711	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:36:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Security policy in the Group policy objects has been applied successfully.	1704		16384	4	0		36028797018963968	710	SceCli		Application			n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:16:14 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	709	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:07:11 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T06:06:11Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	708	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:07:11 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	707	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:06:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258211 minutes.	1037	0	32768	4	0	0	36028797018963968	706	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:06:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258211)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	705	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:06:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	704	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:06:41 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	703	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 6:06:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	702	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:37:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T05:36:10Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	701	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:37:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	700	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:36:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258242 minutes.	1037	0	32768	4	0	0	36028797018963968	699	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:36:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258242)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	698	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:36:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	697	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:36:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	696	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:36:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	695	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:07:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T05:06:10Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	694	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:07:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	693	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:06:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258272 minutes.	1037	0	32768	4	0	0	36028797018963968	692	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:06:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258272)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	691	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:06:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	690	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:06:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	689	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 5:06:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	688	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:37:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T04:36:10Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	687	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:37:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	686	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:36:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258302 minutes.	1037	0	32768	4	0	0	36028797018963968	685	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:36:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258302)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	684	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:36:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	683	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:36:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	682	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:36:40 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	681	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:07:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T04:06:10Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	680	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:07:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	679	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:06:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258332 minutes.	1037	0	32768	4	0	0	36028797018963968	678	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:06:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258332)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	677	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:06:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	676	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:06:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	675	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 4:06:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	674	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:37:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T03:36:09Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	673	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:37:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	672	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:36:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258362 minutes.	1037	0	32768	4	0	0	36028797018963968	671	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:36:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258362)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	670	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:36:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	669	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:36:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	668	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:36:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	667	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:07:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T03:06:09Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	666	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:07:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	665	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:06:15 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258392 minutes.	1037	0	32768	4	0	0	36028797018963968	664	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:06:15 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258392)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	663	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:06:15 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	662	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:06:15 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=devicecensus.exe	900	0	16384	4	0	0	36028797018963968	661	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 3:06:15 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	660	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:37:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T02:36:09Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	659	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:37:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	658	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:36:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258422 minutes.	1037	0	32768	4	0	0	36028797018963968	657	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:36:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258422)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	656	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:36:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	655	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:36:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	654	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:36:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	653	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:07:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T02:06:09Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	652	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:07:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	651	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:06:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258452 minutes.	1037	0	32768	4	0	0	36028797018963968	650	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:06:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258452)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	649	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:06:39 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	648	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:06:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	647	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 2:06:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	646	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:37:08 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T01:36:08Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	645	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:37:08 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	644	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:36:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258482 minutes.	1037	0	32768	4	0	0	36028797018963968	643	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:36:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258482)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	642	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:36:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	641	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:36:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	640	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:36:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	639	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:07:08 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T01:06:08Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	638	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:07:08 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	637	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:06:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258512 minutes.	1037	0	32768	4	0	0	36028797018963968	636	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:06:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258512)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	635	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:06:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	634	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:06:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	633	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 1:06:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	632	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:37:08 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T00:36:08Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	631	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:37:08 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	630	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:36:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258542 minutes.	1037	0	32768	4	0	0	36028797018963968	629	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:36:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258542)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	628	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:36:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	627	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:36:38 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	626	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:36:37 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	625	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:07:07 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-21T00:06:07Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	624	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:07:07 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	623	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:06:37 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258572 minutes.	1037	0	32768	4	0	0	36028797018963968	622	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:06:37 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258572)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	621	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:06:37 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	620	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:06:37 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	619	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/20/2021 12:06:37 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	618	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:37:07 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T23:36:07Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	617	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:37:07 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	616	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:36:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258602 minutes.	1037	0	32768	4	0	0	36028797018963968	615	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:36:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258602)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	614	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:36:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	613	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:36:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	612	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:36:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	611	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:07:07 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T23:06:07Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	610	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:07:07 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	609	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:06:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258632 minutes.	1037	0	32768	4	0	0	36028797018963968	608	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:06:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258632)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	607	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:06:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	606	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:06:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	605	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 11:06:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	604	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:37:07 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T22:36:06Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	603	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:37:07 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	602	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:36:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258662 minutes.	1037	0	32768	4	0	0	36028797018963968	601	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:36:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258662)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	600	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:36:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	599	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:36:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	598	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:36:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	597	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:07:06 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T22:06:06Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	596	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:07:06 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	595	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:06:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258692 minutes.	1037	0	32768	4	0	0	36028797018963968	594	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:06:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258692)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	593	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:06:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	592	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:06:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	591	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 10:06:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	590	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:37:06 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T21:36:06Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	589	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:37:06 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	588	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:36:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258722 minutes.	1037	0	32768	4	0	0	36028797018963968	587	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:36:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258722)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	586	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:36:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	585	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:36:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	584	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:36:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	583	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:07:06 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T21:06:06Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	582	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:07:06 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	581	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:06:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258752 minutes.	1037	0	32768	4	0	0	36028797018963968	580	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:06:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258752)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	579	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:06:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	578	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:06:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	577	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 9:06:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	576	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:37:05 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T20:36:05Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	575	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:37:05 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	574	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:36:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258782 minutes.	1037	0	32768	4	0	0	36028797018963968	573	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:36:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258782)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	572	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:36:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	571	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:36:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	570	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:36:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	569	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:07:05 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T20:06:05Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	568	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:07:05 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	567	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:06:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258812 minutes.	1037	0	32768	4	0	0	36028797018963968	566	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:06:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258812)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	565	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:06:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	564	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:06:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	563	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 8:06:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	562	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:37:05 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T19:36:05Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	561	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:37:05 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	560	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:36:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258842 minutes.	1037	0	32768	4	0	0	36028797018963968	559	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:36:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258842)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	558	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:36:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	557	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:36:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	556	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:36:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	555	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:07:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T19:06:04Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	554	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:07:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	553	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:06:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258872 minutes.	1037	0	32768	4	0	0	36028797018963968	552	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:06:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258872)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	551	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:06:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	550	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:06:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	549	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 7:06:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	548	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:37:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T18:36:04Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	547	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:37:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	546	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:36:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258902 minutes.	1037	0	32768	4	0	0	36028797018963968	545	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:36:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258902)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	544	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:36:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	543	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:36:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	542	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:36:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	541	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:07:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T18:06:04Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	540	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:07:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	539	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:06:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258932 minutes.	1037	0	32768	4	0	0	36028797018963968	538	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:06:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258932)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	537	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:06:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	536	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:06:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	535	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 6:06:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	534	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:37:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T17:36:04Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	533	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:37:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	532	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:36:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258962 minutes.	1037	0	32768	4	0	0	36028797018963968	531	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:36:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258962)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	530	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:36:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	529	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:36:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	528	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:36:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	527	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:07:03 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T17:06:03Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	526	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:07:03 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	525	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:06:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 258992 minutes.	1037	0	32768	4	0	0	36028797018963968	524	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:06:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 258992)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	523	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:06:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	522	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:06:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	521	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 5:06:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	520	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:37:03 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T16:36:03Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	519	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:37:03 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	518	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:36:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259022 minutes.	1037	0	32768	4	0	0	36028797018963968	517	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:36:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259022)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	516	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:36:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	515	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:36:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	514	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:36:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	513	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:07:03 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T16:06:03Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	512	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:07:03 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	511	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:06:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259052 minutes.	1037	0	32768	4	0	0	36028797018963968	510	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:06:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259052)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	509	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:06:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	508	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:06:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	507	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 4:06:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	506	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:37:02 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T15:36:02Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	505	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:37:02 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	504	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:36:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259082 minutes.	1037	0	32768	4	0	0	36028797018963968	503	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:36:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259082)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	502	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:36:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	501	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:36:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	500	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:36:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	499	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:07:02 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T15:06:02Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	498	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:07:02 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	497	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:06:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259112 minutes.	1037	0	32768	4	0	0	36028797018963968	496	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:06:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259112)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	495	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:06:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	494	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:06:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	493	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 3:06:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	492	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:37:02 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T14:36:02Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	491	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:37:02 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	490	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:36:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259142 minutes.	1037	0	32768	4	0	0	36028797018963968	489	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:36:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259142)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	488	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:36:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	487	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:36:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	486	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:36:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.	1000	0		4	0	0	-9223372036854775808	485	Microsoft-Windows-LoadPerf	122ee297-bb47-41ae-b265-1ca8d1886d40	Application	4176	4144	n-h2-791505-3.cbci-791505-3.local	S-1-5-18	5/19/2021 2:14:17 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	484	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:09:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T14:08:04Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	483	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:09:04 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	482	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:08:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259170 minutes.	1037	0	32768	4	0	0	36028797018963968	481	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:08:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259170)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	480	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:08:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	479	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:08:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:<none>	900	0	16384	4	0	0	36028797018963968	478	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:08:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1	4202	0	16384	4	2	0	36028797018963968	477	Microsoft-Windows-MSDTC 2	5d9e0020-3761-4f36-90c8-38ce6511bd12	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:08:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information		TM	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
	0		0	4	0		36028797018963968	476	neutron-hyperv-agent		Application			n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:07:26 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark					System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
	0		0	4	0		36028797018963968	475	nova-compute		Application			n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:07:23 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark					System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'CBCI-791505-3\administrator' .	5	0	16384	4	0	0	36028797018963968	474	Microsoft-Windows-Search-ProfileNotify	fc6f77dd-769a-470e-bcf9-1b6555a118be	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:07:21 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	473	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:07:11 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T14:06:10Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	472	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:07:11 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Fault bucket 1497127695252583348, type 4 Event Name: APPCRASH Response: Not available Cab Id: 0 Problem signature: P1: MsMpEng.exe P2: 4.12.17007.18011 P3: 3e7f7c1a P4: mprtp.dll P5: 4.12.17007.18011 P6: ddfec2bf P7: c0000005 P8: 0000000000020c85 P9: P10: Attached files: These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_MsMpEng.exe_1e275f8ea419f840d62fae9d203a12d968974733_b782b474_1248826e Analysis symbol: Rechecking for solution: 0 Report Id: 13153263-c26a-4706-b052-7c0b497cfcb0 Report Status: 0 Hashed bucket: 46637d44318416aa74c6ddb4eaedf3b4	1001		0	4	0		36028797018963968	471	Windows Error Reporting		Application			n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:06:56 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Fault bucket , type 0 Event Name: APPCRASH Response: Not available Cab Id: 0 Problem signature: P1: MsMpEng.exe P2: 4.12.17007.18011 P3: 3e7f7c1a P4: mprtp.dll P5: 4.12.17007.18011 P6: ddfec2bf P7: c0000005 P8: 0000000000020c85 P9: P10: Attached files: These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MsMpEng.exe_1e275f8ea419f840d62fae9d203a12d968974733_b782b474_0c287c06 Analysis symbol: Rechecking for solution: 0 Report Id: 13153263-c26a-4706-b052-7c0b497cfcb0 Report Status: 4 Hashed bucket:	1001		0	4	0		36028797018963968	470	Windows Error Reporting		Application			n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:06:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Faulting application name: MsMpEng.exe, version: 4.12.17007.18011, time stamp: 0x3e7f7c1a Faulting module name: mprtp.dll, version: 4.12.17007.18011, time stamp: 0xddfec2bf Exception code: 0xc0000005 Fault offset: 0x0000000000020c85 Faulting process id: 0x9a0 Faulting application start time: 0x01d74cb82ae7823a Faulting application path: C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\MsMpEng.exe Faulting module path: C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\mprtp.dll Report Id: 13153263-c26a-4706-b052-7c0b497cfcb0 Faulting package full name: Faulting package-relative application ID:	1000		0	2	100		36028797018963968	469	Application Error		Application			n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:06:51 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info	Application Crashing Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
	0		0	4	0		36028797018963968	468	cloudbase-init		Application			n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:06:49 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark					System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Security policy in the Group policy objects has been applied successfully.	1704		16384	4	0		36028797018963968	467	SceCli		Application			n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:06:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully	5617	2		4	0	0	-9223372036854775808	466	Microsoft-Windows-WMI	1edeee53-0afe-4609-b846-d8c0b2075b1f	Application	1440	2492	n-h2-791505-3.cbci-791505-3.local	S-1-5-18	5/19/2021 2:06:33 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
	0		0	4	0		36028797018963968	465	cloudbase-init		Application			n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:06:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark					System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	464	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:06:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259172 minutes.	1037	0	32768	4	0	0	36028797018963968	463	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:06:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259172)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	462	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:06:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	461	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:06:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	460	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3.cbci-791505-3.local		5/19/2021 2:06:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully.	1531	0		4	0	0	-9223372036854775808	459	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	1440	1484	n-h2-791505-3.cbci-791505-3.local	S-1-5-18	5/19/2021 2:06:30 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully	5615	2		4	0	0	-9223372036854775808	458	Microsoft-Windows-WMI	1edeee53-0afe-4609-b846-d8c0b2075b1f	Application	1440	1516	n-h2-791505-3.cbci-791505-3.local	S-1-5-18	5/19/2021 2:06:30 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped.	1532	0		4	0	0	-9223372036854775808	457	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	584	1796	n-h2-791505-3	S-1-5-18	5/19/2021 2:06:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service is shutting down due to shutdown event from the Service Control Manager.	8225		0	4	0		36028797018963968	456	VSS		Application			n-h2-791505-3		5/19/2021 2:06:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.	4111	0	16384	4	1	0	36028797018963968	455	Microsoft-Windows-MSDTC	719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d	Application	0	0	n-h2-791505-3		5/19/2021 2:06:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information		SVC	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	454	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 2:04:42 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T14:03:42Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	453	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 2:04:42 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	452	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 2:04:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259174 minutes.	1037	0	32768	4	0	0	36028797018963968	451	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 2:04:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259174)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	450	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 2:04:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	449	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 2:04:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=wlms.exe	900	0	16384	4	0	0	36028797018963968	448	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 2:04:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.	1000	0		4	0	0	-9223372036854775808	447	Microsoft-Windows-LoadPerf	122ee297-bb47-41ae-b265-1ca8d1886d40	Application	4056	3176	n-h2-791505-3	S-1-5-18	5/19/2021 1:53:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root list with effective date: ?Monday, ?April ?19, ?2021 8:12:39 PM.	4111	0	0	4	0	0	-9187343239835811840	446	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1352	4008	n-h2-791505-3		5/19/2021 1:53:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE> Sha1 thumbprint: <02FAF3E291435468607857694DF5E45B68851868>.	4109	0	0	4	0	0	-9187343239835811840	445	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1352	4008	n-h2-791505-3		5/19/2021 1:53:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5>.	4109	0	0	4	0	0	-9187343239835811840	444	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1352	4008	n-h2-791505-3		5/19/2021 1:53:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> Sha1 thumbprint: <742C3192E607E424EB4549542BE1BBC53E6174E2>.	4109	0	0	4	0	0	-9187343239835811840	443	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1352	4008	n-h2-791505-3		5/19/2021 1:53:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.	4109	0	0	4	0	0	-9187343239835811840	442	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1352	4008	n-h2-791505-3		5/19/2021 1:53:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE> Sha1 thumbprint: <D4DE20D05E66FC53FE1A50882C78DB2852CAE474>.	4109	0	0	4	0	0	-9187343239835811840	441	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1352	4008	n-h2-791505-3		5/19/2021 1:53:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.	4109	0	0	4	0	0	-9187343239835811840	440	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1352	4008	n-h2-791505-3		5/19/2021 1:53:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto property update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.	4109	0	0	4	0	0	-9187343239835811840	439	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1352	4008	n-h2-791505-3		5/19/2021 1:53:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data in the data section contains the new index values assigned to this service.	1000	0		4	0	0	-9223372036854775808	438	Microsoft-Windows-LoadPerf	122ee297-bb47-41ae-b265-1ca8d1886d40	Application	3232	3408	n-h2-791505-3	S-1-5-18	5/19/2021 1:43:31 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2021?-?05?-?19T13:39:25.374945200Z.	10001	0		4	0	0	-9223372036854775808	437	Microsoft-Windows-RestartManager	0888e5ef-9b98-4695-979d-e92ce4247224	Application	4444	4436	n-h2-791505-3	S-1-5-21-1730896045-2597512215-2336559051-1001	5/19/2021 1:39:26 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 4116.	1042		0	4	0		36028797018963968	436	MsiInstaller		Application			n-h2-791505-3	S-1-5-18	5/19/2021 1:39:26 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.	1033		0	4	0		36028797018963968	435	MsiInstaller		Application			n-h2-791505-3	S-1-5-21-1730896045-2597512215-2336559051-1001	5/19/2021 1:39:26 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 -- Installation completed successfully.	11707		0	4	0		36028797018963968	434	MsiInstaller		Application			n-h2-791505-3	S-1-5-21-1730896045-2597512215-2336559051-1001	5/19/2021 1:39:26 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2021?-?05?-?19T13:39:25.374945200Z.	10000	0		4	0	0	-9223372036854775808	433	Microsoft-Windows-RestartManager	0888e5ef-9b98-4695-979d-e92ce4247224	Application	4444	4764	n-h2-791505-3	S-1-5-21-1730896045-2597512215-2336559051-1001	5/19/2021 1:39:25 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending session 0 started ?2021?-?05?-?19T13:39:24.817860000Z.	10001	0		4	0	0	-9223372036854775808	432	Microsoft-Windows-RestartManager	0888e5ef-9b98-4695-979d-e92ce4247224	Application	4444	4436	n-h2-791505-3	S-1-5-21-1730896045-2597512215-2336559051-1001	5/19/2021 1:39:25 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2021?-?05?-?19T13:39:24.817860000Z.	10000	0		4	0	0	-9223372036854775808	431	Microsoft-Windows-RestartManager	0888e5ef-9b98-4695-979d-e92ce4247224	Application	4444	4760	n-h2-791505-3	S-1-5-21-1730896045-2597512215-2336559051-1001	5/19/2021 1:39:24 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi. Client Process Id: 4116.	1040		0	4	0		36028797018963968	430	MsiInstaller		Application			n-h2-791505-3	S-1-5-21-1730896045-2597512215-2336559051-1001	5/19/2021 1:39:25 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Ending a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 4116.	1042		0	4	0		36028797018963968	429	MsiInstaller		Application			n-h2-791505-3	S-1-5-18	5/19/2021 1:39:25 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer installed the product. Product Name: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030. Product Version: 11.0.61030. Product Language: 1033. Manufacturer: Microsoft Corporation. Installation success or error status: 0.	1033		0	4	0		36028797018963968	428	MsiInstaller		Application			n-h2-791505-3	S-1-5-21-1730896045-2597512215-2336559051-1001	5/19/2021 1:39:25 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Product: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 -- Installation completed successfully.	11707		0	4	0		36028797018963968	427	MsiInstaller		Application			n-h2-791505-3	S-1-5-21-1730896045-2597512215-2336559051-1001	5/19/2021 1:39:25 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Beginning a Windows Installer transaction: C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi. Client Process Id: 4116.	1040		0	4	0		36028797018963968	426	MsiInstaller		Application			n-h2-791505-3	S-1-5-21-1730896045-2597512215-2336559051-1001	5/19/2021 1:39:24 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Installer reconfigured the product. Product Name: Cloudbase-Init 0.9.12.dev26. Product Version: 0.9.12.0. Product Language: 1033. Manufacturer: Cloudbase Solutions Srl. Reconfiguration success or error status: 0.	1035		0	4	0		36028797018963968	425	MsiInstaller		Application			n-h2-791505-3	S-1-5-18	5/19/2021 1:39:16 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2021?-?05?-?19T13:38:43.087370900Z.	10000	0		4	0	0	-9223372036854775808	424	Microsoft-Windows-RestartManager	0888e5ef-9b98-4695-979d-e92ce4247224	Application	4192	2560	n-h2-791505-3	S-1-5-21-1730896045-2597512215-2336559051-1001	5/19/2021 1:38:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Starting session 0 - ?2021?-?05?-?19T13:38:43.071313700Z.	10000	0		4	0	0	-9223372036854775808	423	Microsoft-Windows-RestartManager	0888e5ef-9b98-4695-979d-e92ce4247224	Application	4192	2560	n-h2-791505-3	S-1-5-21-1730896045-2597512215-2336559051-1001	5/19/2021 1:38:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	422	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:38:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully scheduled Software Protection service for re-start at 2021-05-20T13:37:15Z. Reason: TBL.	16384	0	16384	4	0	0	36028797018963968	421	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:38:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3> Sha1 thumbprint: <D69B561148F01C77C54578C10926DF5B856976AD>.	4097	0	0	4	0	0	-9187343239835811840	420	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1352	1968	n-h2-791505-3		5/19/2021 1:38:12 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=379cccfb-d4e0-48fe-b0f2-0136097be147;Action=CleanupState;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;Trigger=TimerEvent	8197	0	49152	4	0	0	36028797018963968	419	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:44 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2021/11/15:13:37:41;LastConsumptionReason=0x4004fc04;LastNotificationId=Cleanup;LicenseState=SL_LICENSING_STATUS_LICENSED;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147;uxDifferentiator=TIMEBASED_EVAL	8230	0	16384	4	0	0	36028797018963968	418	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:43 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;NotificationInterval=1440;Trigger=TimerEvent	8197	0	49152	4	0	0	36028797018963968	417	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Time-based license remaining validity time 259200 minutes.	1037	0	32768	4	0	0	36028797018963968	416	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	415	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 [0x00000000, 1, 0], [(?)( 1 0x00000000)(?)( 2 0x00000000 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)( 9 0x00000000 180 259200)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	414	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
These policies are being excluded since they are only defined with override-only attribute. Policy Names=(Security-SPP-Reserved-EnableNotificationMode) App Id=55c92734-d682-4d71-983e-d6ec3f16059f Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4	1033	0	16384	4	0	0	36028797018963968	413	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-Reserved-LicenseProperties Priority=100	1034	0	16384	4	0	0	36028797018963968	412	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Validity period has been started. Validity minutes=259200 Grace type=9.	1036	0	16384	4	0	0	36028797018963968	411	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:41 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MSA client has been successfully triggered to update the Device License	12311	0	16384	4	0	0	36028797018963968	410	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:40 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully acquired genuine ticket for template Id {99d92734-d682-4d71-983e-d6ec3f16059f}	12304	0	16384	4	0	0	36028797018963968	409	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:39 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine state set to genuine for application Id 55c92734-d682-4d71-983e-d6ec3f16059f	12305	0	16384	4	0	0	36028797018963968	408	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:39 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection ended.	20489	0	49152	4	0	0	36028797018963968	407	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500	1034	0	16384	4	0	0	36028797018963968	406	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check passed.	20482	0	49152	4	0	0	36028797018963968	405	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Health check initiated.	20481	0	49152	4	0	0	36028797018963968	404	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:36 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine validation data collection started.	20488	0	49152	4	0	0	36028797018963968	403	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Genuine information set for application. 0x00000000, 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, SL_ACTIVATION_VALIDATION_IN_PROGRESS.	1067	0	32768	4	0	0	36028797018963968	402	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PRIVATE} License Id=50deeeba-ca1c-4460-9320-a060e287a7f5	1004	0	16384	4	0	0	36028797018963968	401	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has successfully installed the license. License Title=XrML 2.1 License - {msft:sl/EUL/ACTIVATED/PUBLIC} License Id=14c637ba-d77c-4a82-8891-b5def7fd73ee	1004	0	16384	4	0	0	36028797018963968	400	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Acquisition of End User License was successful. Sku Id=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4	1013	0	16384	0	0	0	36028797018963968	399	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:34 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <DF3C24F9BFD666761B268073FE06D1CC8D4F82A4>.	4097	0	0	4	0	0	-9187343239835811840	398	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1352	1980	n-h2-791505-3		5/19/2021 1:37:32 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;GraceEndDate=2021/05/29:13:32:30;LastConsumptionReason=0x4004f00c;LastNotificationId=NeverActivated;LicenseState=SL_LICENSING_STATUS_IN_GRACE_PERIOD;PartialProductKey=TVKQ6;ProductKeyType=Retail:TB:Eval;SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4;ruleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;uxDifferentiator=TIMEBASED_EVAL	8230	0	16384	4	0	0	36028797018963968	397	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:37:30 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Fault bucket 1497127695252583348, type 4 Event Name: APPCRASH Response: Not available Cab Id: 0 Problem signature: P1: MsMpEng.exe P2: 4.12.17007.18011 P3: 3e7f7c1a P4: mprtp.dll P5: 4.12.17007.18011 P6: ddfec2bf P7: c0000005 P8: 0000000000020c85 P9: P10: Attached files: These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_MsMpEng.exe_1e275f8ea419f840d62fae9d203a12d968974733_b782b474_100f1dab Analysis symbol: Rechecking for solution: 0 Report Id: 37e76886-ac3c-414c-ac1b-46b46856b575 Report Status: 0 Hashed bucket: 46637d44318416aa74c6ddb4eaedf3b4	1001		0	4	0		36028797018963968	396	Windows Error Reporting		Application			n-h2-791505-3		5/19/2021 1:37:13 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
MSDTC started with the following settings: Security Configuration (OFF = 0 and ON = 1): Allow Remote Administrator = 0, Network Clients = 0, Transaction Manager Communication: Allow Inbound Transactions = 0, Allow Outbound Transactions = 0, Transaction Internet Protocol (TIP) = 0, Enable XA Transactions = 0, Enable SNA LU 6.2 Transactions = 1, MSDTC Communications Security = Mutual Authentication Required, Account = NT AUTHORITY\NetworkService, Firewall Exclusion Detected = 0 Transaction Bridge Installed = 0 Filtering Duplicate Events = 1	4202	0	16384	4	2	0	36028797018963968	395	Microsoft-Windows-MSDTC 2	5d9e0020-3761-4f36-90c8-38ce6511bd12	Application	0	0	n-h2-791505-3		5/19/2021 1:36:14 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information		TM	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Open Procedure for service "BITS" in DLL "C:\Windows\System32\bitsperf.dll" failed. Performance data for this service will not be available. The first four bytes (DWORD) of the Data section contains the error code.	1008	0	49152	2	0	0	36028797018963968	394	Microsoft-Windows-Perflib	13b197bd-7cee-4b4e-8dd0-59314ce374ce	Application	0	0	n-h2-791505-3		5/19/2021 1:35:26 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Fault bucket , type 0 Event Name: APPCRASH Response: Not available Cab Id: 0 Problem signature: P1: MsMpEng.exe P2: 4.12.17007.18011 P3: 3e7f7c1a P4: mprtp.dll P5: 4.12.17007.18011 P6: ddfec2bf P7: c0000005 P8: 0000000000020c85 P9: P10: Attached files: These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MsMpEng.exe_1e275f8ea419f840d62fae9d203a12d968974733_b782b474_0c156992 Analysis symbol: Rechecking for solution: 0 Report Id: 37e76886-ac3c-414c-ac1b-46b46856b575 Report Status: 96 Hashed bucket:	1001		0	4	0		36028797018963968	393	Windows Error Reporting		Application			n-h2-791505-3		5/19/2021 1:35:23 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Fault bucket , type 0 Event Name: APPCRASH Response: Not available Cab Id: 0 Problem signature: P1: MsMpEng.exe P2: 4.12.17007.18011 P3: 3e7f7c1a P4: mprtp.dll P5: 4.12.17007.18011 P6: ddfec2bf P7: c0000005 P8: 0000000000020c85 P9: P10: Attached files: These files may be available here: C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MsMpEng.exe_1e275f8ea419f840d62fae9d203a12d968974733_b782b474_0c156992 Analysis symbol: Rechecking for solution: 0 Report Id: 37e76886-ac3c-414c-ac1b-46b46856b575 Report Status: 4 Hashed bucket:	1001		0	4	0		36028797018963968	392	Windows Error Reporting		Application			n-h2-791505-3		5/19/2021 1:35:21 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Faulting application name: MsMpEng.exe, version: 4.12.17007.18011, time stamp: 0x3e7f7c1a Faulting module name: mprtp.dll, version: 4.12.17007.18011, time stamp: 0xddfec2bf Exception code: 0xc0000005 Fault offset: 0x0000000000020c85 Faulting process id: 0x9fc Faulting application start time: 0x01d74cb3a7944d5c Faulting application path: C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\MsMpEng.exe Faulting module path: C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\mprtp.dll Report Id: 37e76886-ac3c-414c-ac1b-46b46856b575 Faulting package full name: Faulting package-relative application ID:	1000		0	2	100		36028797018963968	391	Application Error		Application			n-h2-791505-3		5/19/2021 1:35:21 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info	Application Crashing Events	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
	0		0	4	0		36028797018963968	390	cloudbase-init		Application			n-h2-791505-3		5/19/2021 1:35:08 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark					System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 1 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14398)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]	1003	0	16384	4	0	0	36028797018963968	389	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:34:56 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Profile notification of event Create for component {DE3F3560-3032-41B4-B6CF-F703B1B95640} failed, error code is Access is denied. .	1534	0		3	0	0	-9223372036854775808	388	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	584	3040	n-h2-791505-3	S-1-5-21-1730896045-2597512215-2336559051-1000	5/19/2021 1:34:55 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service failed to create default configuration for new user 'N-H2-791505-3\Admin' in response to user profile creation. Error code 0x80070005. Access is denied. .	6	0	49152	2	0	0	36028797018963968	387	Microsoft-Windows-Search-ProfileNotify	fc6f77dd-769a-470e-bcf9-1b6555a118be	Application	0	0	n-h2-791505-3		5/19/2021 1:34:55 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
	0		0	4	0		36028797018963968	386	cloudbase-init		Application			n-h2-791505-3		5/19/2021 1:34:18 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark					System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Search Service has created default configuration for new user 'N-H2-791505-3\cloudbase-init' .	5	0	16384	4	0	0	36028797018963968	385	Microsoft-Windows-Search-ProfileNotify	fc6f77dd-769a-470e-bcf9-1b6555a118be	Application	0	0	n-h2-791505-3		5/19/2021 1:34:15 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of third-party root certificate:: Subject: <CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US> Sha1 thumbprint: <A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436>.	4097	0	0	4	0	0	-9187343239835811840	384	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1352	1388	n-h2-791505-3		5/19/2021 1:34:14 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully	5617	2		4	0	0	-9223372036854775808	383	Microsoft-Windows-WMI	1edeee53-0afe-4609-b846-d8c0b2075b1f	Application	584	864	n-h2-791505-3	S-1-5-18	5/19/2021 1:34:13 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully	5615	2		4	0	0	-9223372036854775808	382	Microsoft-Windows-WMI	1edeee53-0afe-4609-b846-d8c0b2075b1f	Application	584	104	n-h2-791505-3	S-1-5-18	5/19/2021 1:34:11 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully.	1531	0		4	0	0	-9223372036854775808	381	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	584	1796	n-h2-791505-3	S-1-5-18	5/19/2021 1:34:09 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 )(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14399)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]	1003	0	16384	4	0	0	36028797018963968	380	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:34:11 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500	1034	0	16384	4	0	0	36028797018963968	379	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:34:11 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Proof of Purchase installed successfully. ACID=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4 PKeyId=771fdd12-cf29-6d27-eb0d-9c7435943845	1016	0	16384	4	0	0	36028797018963968	378	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	n-h2-791505-3		5/19/2021 1:34:11 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds. The suppression timeout can be controlled by a REG_DWORD value named SuppressDuplicateDuration under the following registry key: HKLM\Software\Microsoft\EventSystem\EventLog.	4625	0	16384	4	0	0	36028797018963968	377	Microsoft-Windows-EventSystem	899daace-4868-4295-afcd-9eb8fb497561	Application	0	0	n-h2-791505-3		5/19/2021 1:34:10 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped.	1532	0		4	0	0	-9223372036854775808	376	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	576	1468	WIN-5T344G8GM1H	S-1-5-18	5/19/2021 1:33:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has stopped.	903	0	16384	0	0	0	36028797018963968	375	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		5/19/2021 1:33:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VSS service is shutting down due to shutdown event from the Service Control Manager.	8225		0	4	0		36028797018963968	374	VSS		Application			WIN-5T344G8GM1H		5/19/2021 1:33:35 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Microsoft Hyper-V VSS Writer and ID {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {66841cd4-6ded-4f4b-8f17-fd23f8ddc3de} Writer Name: Microsoft Hyper-V VSS Writer	8212		0	4	0		36028797018963968	373	VSS		Application			WIN-5T344G8GM1H		5/19/2021 1:32:49 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successful auto update of disallowed certificate list with effective date: ?Tuesday, ?March ?16, ?2021 7:29:24 AM.	4112	0	0	4	0	0	-9187343239835811840	372	Microsoft-Windows-CAPI2	5bbca4a8-b209-48dc-a8c7-b23d3e5216fb	Application	1692	1788	WIN-5T344G8GM1H		5/19/2021 1:32:45 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service subsystems initialized successfully	5617	2		4	0	0	-9223372036854775808	371	Microsoft-Windows-WMI	1edeee53-0afe-4609-b846-d8c0b2075b1f	Application	576	1844	WIN-5T344G8GM1H	S-1-5-18	5/19/2021 1:32:38 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows Management Instrumentation Service started sucessfully	5615	2		4	0	0	-9223372036854775808	370	Microsoft-Windows-WMI	1edeee53-0afe-4609-b846-d8c0b2075b1f	Application	576	1540	WIN-5T344G8GM1H	S-1-5-18	5/19/2021 1:32:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has started successfully.	1531	0		4	0	0	-9223372036854775808	369	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	576	1468	WIN-5T344G8GM1H	S-1-5-18	5/19/2021 1:32:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Shadow Copy Optimization Writer and ID {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Writer Name: Shadow Copy Optimization Writer	8212		0	4	0		36028797018963968	368	VSS		Application			WIN-5T344G8GM1H		5/19/2021 1:32:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name ASR Writer and ID {be000cbe-11fe-4426-9c58-531aa6355fc4} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {be000cbe-11fe-4426-9c58-531aa6355fc4} Writer Name: ASR Writer	8212		0	4	0		36028797018963968	367	VSS		Application			WIN-5T344G8GM1H		5/19/2021 1:32:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name COM+ REGDB Writer and ID {542da469-d3e1-473c-9f4f-7847f01fc64f} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {542da469-d3e1-473c-9f4f-7847f01fc64f} Writer Name: COM+ REGDB Writer	8212		0	4	0		36028797018963968	366	VSS		Application			WIN-5T344G8GM1H		5/19/2021 1:32:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Volume Shadow Copy Service: Writer with name Registry Writer and ID {afbab4a2-367d-4d15-a586-71dbb18f8485} attempted to subscribe during setup. Operation: Initializing Writer Context: Writer Class Id: {afbab4a2-367d-4d15-a586-71dbb18f8485} Writer Name: Registry Writer	8212		0	4	0		36028797018963968	365	VSS		Application			WIN-5T344G8GM1H		5/19/2021 1:32:37 PM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The User Profile Service has stopped.	1532	0		4	0	0	-9223372036854775808	364	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	976	1228	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:48:13 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. No user action is required. DETAIL - 9 user registry handles leaked from \Registry\User\S-1-5-21-416071247-492812682-1642729393-500: Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Parents Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore Process 312 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Main Process 3092 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\ActiveSync\Partners Process 764 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\System\GameConfigStore\Children Process 976 (\Device\HarddiskVolume1\Windows\System32\svchost.exe) has opened key \REGISTRY\USER\S-1-5-21-416071247-492812682-1642729393-500\SOFTWARE\Microsoft\Internet Explorer\Security	1530	0		4	0	0	-9223372036854775808	363	Microsoft-Windows-User Profiles Service	89b1e9f0-5aff-44a6-9b44-0a07a7ce5845	Application	976	3432	WIN-5T344G8GM1H	S-1-5-18	1/19/2018 9:48:12 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The winlogon notification subscriber <SessionEnv> failed a notification event.	6001	0	32768	3	0	0	36028797018963968	362	Microsoft-Windows-Winlogon	dbe9b383-7cf3-4331-91cc-a3cb16a3b538	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:12 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Warning			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
SLUI.exe was launched with the following command-line parameters: RuleId=984306a1-75fc-4a6b-b3f9-8501ba26a448;Action=NotifyUser;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;NotificationInterval=1440;Trigger=TimerEvent	8197	0	49152	4	0	0	36028797018963968	361	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The rules engine successfully re-evaluated the schedule. Kernel policies: Security-SPP-Action-StateData (REG_SZ) =AppId=55c92734-d682-4d71-983e-d6ec3f16059f;LastNotificationId=RebootRequired;ruleId=984306a1-75fc-4a6b-b3f9-8501ba26a448	8230	0	16384	4	0	0	36028797018963968	360	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004D302, 0, 0], [(?)(?)(?)(?)(?)(?)(?)(?)])(1 )(2 )(3 )]	1003	0	16384	4	0	0	36028797018963968	359	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Rearm successful for AppId = 55c92734-d682-4d71-983e-d6ec3f16059f, SkuId = (null) - 5 Rearms Remaining.	12306	0	16384	4	0	0	36028797018963968	358	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has started. 10.0.14393.351	902	0	16384	0	0	0	36028797018963968	357	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service has completed licensing status check. Application Id=55c92734-d682-4d71-983e-d6ec3f16059f Licensing Status= 1: 9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4, 1, 0 [(0 [0xC004E003, 0, 0], [( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)( 1 0x00000000)(?)( 2 0xC004F00F 0 0 msft:rm/algorithm/hwid/4.0 0x00000000 0)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])(1 )(2 )(3 [0x00000000, 0, 1], [(?)( 1 0x00000000)( 6 0x00000000 10 14400)(?)(?)(?)( 10 0x00000000 msft:rm/algorithm/flags/1.0)(?)])]	1003	0	16384	4	0	0	36028797018963968	356	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Grace period has been started. Grace days=10 Grace type=6.	1025	0	16384	4	0	0	36028797018963968	355	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Duplicate definition of policy found. Policy name=Security-SPP-WriteWauMarker Priority=500	1034	0	16384	4	0	0	36028797018963968	354	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The hardware has changed.	1024	0	32768	4	0	0	36028797018963968	353	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:10 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Hardware has changed from previous boot. AppId=55c92734-d682-4d71-983e-d6ec3f16059f, SkuId=9dfa8ec0-7665-4b9d-b2cb-bfc2dc37c9f4.	1040	0	16384	4	0	0	36028797018963968	352	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Initialization status for service objects. C:\windows\system32\sppwinob.dll, msft:spp/windowsfunctionality/agent/7.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/inherited/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/phone/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:rm/algorithm/pkey/detect, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/ActionScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/TaskScheduler/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/statecollector/pkey, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/1.0, 0x00000000, 0x00000000 C:\windows\system32\sppobjs.dll, msft:spp/volume/services/kms/activationinfo/1.0, 0x00000000, 0x00000000	1066	0	16384	4	0	0	36028797018963968	351	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Software Protection service is starting. Parameters:caller=Sysprep.exe	900	0	16384	4	0	0	36028797018963968	350	Microsoft-Windows-Security-SPP	e23b33b0-c8c9-472c-a5f9-f2bdfea0f156	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:48:09 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information			System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The MS DTC service is stopping.	4111	0	16384	4	1	0	36028797018963968	349	Microsoft-Windows-MSDTC	719be4ed-e9bc-4dd8-a7cf-c85ce8e4975d	Application	0	0	WIN-5T344G8GM1H		1/19/2018 9:47:34 AM			application	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information		SVC	System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]