Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The VHD C:\smbshare\volume-3c2dcdc9-9046-4a60-9dc1-1ec57453149f.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	56	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4924	3660	hv-osbrick-7805	S-1-5-83-1-3218940023-1304227304-4038420116-1392517921	5/1/2021 9:54:49 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-3c2dcdc9-9046-4a60-9dc1-1ec57453149f.7e387e1c-a8f5-493b-a4f0-10a182f7879f.vhdx (target 'C:\smbshare\volume-3c2dcdc9-9046-4a60-9dc1-1ec57453149f.vhdx').	50	0		4	0	0	-9223372036854775808	55	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4216	1160	hv-osbrick-7805	S-1-5-18	5/1/2021 9:54:43 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-3c2dcdc9-9046-4a60-9dc1-1ec57453149f.7e387e1c-a8f5-493b-a4f0-10a182f7879f.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	54	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2964	4128	hv-osbrick-7805	S-1-5-83-1-3218940023-1304227304-4038420116-1392517921	5/1/2021 9:54:43 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-5e7d5928-85e2-4a28-b5e3-8224442b45c9.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	53	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4240	3552	hv-osbrick-7805	S-1-5-83-1-3276756182-1282068238-3086647483-3602583310	5/1/2021 9:54:38 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-5e7d5928-85e2-4a28-b5e3-8224442b45c9.vhdx.	51	0		4	0	0	-9223372036854775808	52	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4172	hv-osbrick-7805	S-1-5-18	5/1/2021 9:52:39 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-5e7d5928-85e2-4a28-b5e3-8224442b45c9.vhdx (target '').	50	0		4	0	0	-9223372036854775808	51	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	4468	hv-osbrick-7805	S-1-5-18	5/1/2021 9:52:38 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-5e7d5928-85e2-4a28-b5e3-8224442b45c9.vhdx.	51	0		4	0	0	-9223372036854775808	50	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4688	hv-osbrick-7805	S-1-5-18	5/1/2021 9:52:38 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-5e7d5928-85e2-4a28-b5e3-8224442b45c9.vhdx (target '').	50	0		4	0	0	-9223372036854775808	49	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	560	hv-osbrick-7805	S-1-5-18	5/1/2021 9:52:38 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-3c2dcdc9-9046-4a60-9dc1-1ec57453149f.7e387e1c-a8f5-493b-a4f0-10a182f7879f.vhdx.	51	0		4	0	0	-9223372036854775808	48	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4584	hv-osbrick-7805	S-1-5-18	5/1/2021 9:52:35 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-3c2dcdc9-9046-4a60-9dc1-1ec57453149f.7e387e1c-a8f5-493b-a4f0-10a182f7879f.vhdx (target '').	50	0		4	0	0	-9223372036854775808	47	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4216	1436	hv-osbrick-7805	S-1-5-18	5/1/2021 9:52:35 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-3c2dcdc9-9046-4a60-9dc1-1ec57453149f.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	46	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4784	4168	hv-osbrick-7805	S-1-5-83-1-3218940023-1304227304-4038420116-1392517921	5/1/2021 9:52:35 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-3c2dcdc9-9046-4a60-9dc1-1ec57453149f.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	45	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4916	4808	hv-osbrick-7805	S-1-5-83-1-4082076315-1235712433-466382998-1037019030	5/1/2021 9:50:52 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-3c2dcdc9-9046-4a60-9dc1-1ec57453149f.vhdx.	51	0		4	0	0	-9223372036854775808	44	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4472	hv-osbrick-7805	S-1-5-18	5/1/2021 9:48:35 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-3c2dcdc9-9046-4a60-9dc1-1ec57453149f.vhdx (target '').	50	0		4	0	0	-9223372036854775808	43	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	4308	hv-osbrick-7805	S-1-5-18	5/1/2021 9:48:35 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-3c2dcdc9-9046-4a60-9dc1-1ec57453149f.vhdx.	51	0		4	0	0	-9223372036854775808	42	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3548	hv-osbrick-7805	S-1-5-18	5/1/2021 9:48:33 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-3c2dcdc9-9046-4a60-9dc1-1ec57453149f.vhdx (target '').	50	0		4	0	0	-9223372036854775808	41	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	1532	hv-osbrick-7805	S-1-5-18	5/1/2021 9:48:33 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\openstack\instances\instance-00000001\root.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	40	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3256	4596	hv-osbrick-7805	S-1-5-83-1-4139357509-1237559672-3536836793-3556232797	5/1/2021 9:48:31 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-f6ae2320-d9b6-40cb-8eb1-b84febf4ae76.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	39	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3256	4596	hv-osbrick-7805	S-1-5-83-1-4139357509-1237559672-3536836793-3556232797	5/1/2021 9:48:26 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	38	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1648	2996	hv-osbrick-7805	S-1-5-83-1-1404743836-1146022448-1626520456-380315596	5/1/2021 9:48:16 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Vhd Chain for VHD C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.2a100918-360a-46d7-8ead-ca1c461ad258.vhdx is corrupted. The expected LastWriteGUID {0B578B1A-38E0-45AB-A24B-68B394449EE2} ({00000000-0000-0000-0000-000000000000}) did not match the parent's actual LastWriteGUID ({50B4E544-62B3-4F48-B539-3ECE93CA6B0E}).	7	0		2	0	0	-9223372036854775808	37	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	3772	hv-osbrick-7805	S-1-5-18	5/1/2021 9:48:13 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Vhd Chain for VHD C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.2a100918-360a-46d7-8ead-ca1c461ad258.vhdx is corrupted. The expected LastWriteGUID {0B578B1A-38E0-45AB-A24B-68B394449EE2} ({00000000-0000-0000-0000-000000000000}) did not match the parent's actual LastWriteGUID ({50B4E544-62B3-4F48-B539-3ECE93CA6B0E}).	7	0		2	0	0	-9223372036854775808	36	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	3772	hv-osbrick-7805	S-1-5-18	5/1/2021 9:48:13 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Vhd Chain for VHD C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.2a100918-360a-46d7-8ead-ca1c461ad258.vhdx is corrupted. The expected LastWriteGUID {0B578B1A-38E0-45AB-A24B-68B394449EE2} ({00000000-0000-0000-0000-000000000000}) did not match the parent's actual LastWriteGUID ({50B4E544-62B3-4F48-B539-3ECE93CA6B0E}).	7	0		2	0	0	-9223372036854775808	35	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	3772	hv-osbrick-7805	S-1-5-18	5/1/2021 9:48:13 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.2a100918-360a-46d7-8ead-ca1c461ad258.vhdx (target 'C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.vhdx').	50	0		4	0	0	-9223372036854775808	34	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4216	1972	hv-osbrick-7805	S-1-5-18	5/1/2021 9:48:12 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.2a100918-360a-46d7-8ead-ca1c461ad258.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	33	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2052	4432	hv-osbrick-7805	S-1-5-83-1-1404743836-1146022448-1626520456-380315596	5/1/2021 9:48:12 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-39dd6dc3-dc75-4752-8933-cfd3ee988640.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	32	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	5028	2040	hv-osbrick-7805	S-1-5-83-1-2637981550-1176970019-184685191-2795645949	5/1/2021 9:48:08 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-39dd6dc3-dc75-4752-8933-cfd3ee988640.vhdx.	51	0		4	0	0	-9223372036854775808	31	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	5020	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:55 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-39dd6dc3-dc75-4752-8933-cfd3ee988640.vhdx (target '').	50	0		4	0	0	-9223372036854775808	30	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	4380	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:54 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-39dd6dc3-dc75-4752-8933-cfd3ee988640.vhdx.	51	0		4	0	0	-9223372036854775808	29	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3584	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:54 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-39dd6dc3-dc75-4752-8933-cfd3ee988640.vhdx (target '').	50	0		4	0	0	-9223372036854775808	28	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	4768	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:54 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.2a100918-360a-46d7-8ead-ca1c461ad258.vhdx.	51	0		4	0	0	-9223372036854775808	27	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	2912	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:49 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.2a100918-360a-46d7-8ead-ca1c461ad258.vhdx (target '').	50	0		4	0	0	-9223372036854775808	26	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4216	1928	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:49 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	25	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4436	3064	hv-osbrick-7805	S-1-5-83-1-1404743836-1146022448-1626520456-380315596	5/1/2021 9:47:49 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\openstack\instances\instance-00000001\root.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	24	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4892	4860	hv-osbrick-7805	S-1-5-83-1-4139357509-1237559672-3536836793-3556232797	5/1/2021 9:47:43 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-f6ae2320-d9b6-40cb-8eb1-b84febf4ae76.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	23	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4892	4860	hv-osbrick-7805	S-1-5-83-1-4139357509-1237559672-3536836793-3556232797	5/1/2021 9:47:43 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.vhdx.	51	0		4	0	0	-9223372036854775808	22	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1140	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:35 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.vhdx (target '').	50	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	4468	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:35 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.vhdx.	51	0		4	0	0	-9223372036854775808	20	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3580	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:33 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-f21feef4-8b16-4cbf-b53d-4f37f4c164a5.vhdx (target '').	50	0		4	0	0	-9223372036854775808	19	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	4308	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:33 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-33fdbfbf-eaa3-408d-8cde-e861f82915ea.15c3d2b6-9a4e-4370-8305-450f8ba75b20.vhdx (target 'C:\smbshare\volume-33fdbfbf-eaa3-408d-8cde-e861f82915ea.vhdx').	50	0		4	0	0	-9223372036854775808	18	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	1240	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:19 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-bbe2b80c-4062-4998-8510-5b3023ca5290.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	17	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1944	4976	hv-osbrick-7805	S-1-5-83-1-3887402569-1305653683-3564665984-1812096013	5/1/2021 9:47:16 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-bbe2b80c-4062-4998-8510-5b3023ca5290.vhdx.	51	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3348	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:03 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-bbe2b80c-4062-4998-8510-5b3023ca5290.vhdx (target '').	50	0		4	0	0	-9223372036854775808	15	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	4752	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:02 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-bbe2b80c-4062-4998-8510-5b3023ca5290.vhdx.	51	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4256	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:02 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-bbe2b80c-4062-4998-8510-5b3023ca5290.vhdx (target '').	50	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	4308	hv-osbrick-7805	S-1-5-18	5/1/2021 9:47:02 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-33fdbfbf-eaa3-408d-8cde-e861f82915ea.15c3d2b6-9a4e-4370-8305-450f8ba75b20.vhdx.	51	0		4	0	0	-9223372036854775808	12	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1624	hv-osbrick-7805	S-1-5-18	5/1/2021 9:46:57 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-33fdbfbf-eaa3-408d-8cde-e861f82915ea.15c3d2b6-9a4e-4370-8305-450f8ba75b20.vhdx (target '').	50	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	4740	hv-osbrick-7805	S-1-5-18	5/1/2021 9:46:57 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-33fdbfbf-eaa3-408d-8cde-e861f82915ea.vhdx.	51	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4228	hv-osbrick-7805	S-1-5-18	5/1/2021 9:46:56 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-33fdbfbf-eaa3-408d-8cde-e861f82915ea.vhdx (target '').	50	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	3408	hv-osbrick-7805	S-1-5-18	5/1/2021 9:46:56 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-33fdbfbf-eaa3-408d-8cde-e861f82915ea.vhdx.	51	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3288	hv-osbrick-7805	S-1-5-18	5/1/2021 9:46:54 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-33fdbfbf-eaa3-408d-8cde-e861f82915ea.vhdx (target '').	50	0		4	0	0	-9223372036854775808	7	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	3828	hv-osbrick-7805	S-1-5-18	5/1/2021 9:46:54 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-f6ae2320-d9b6-40cb-8eb1-b84febf4ae76.vhdx.	51	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3548	hv-osbrick-7805	S-1-5-18	5/1/2021 9:46:48 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-f6ae2320-d9b6-40cb-8eb1-b84febf4ae76.vhdx (target '').	50	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4252	3408	hv-osbrick-7805	S-1-5-18	5/1/2021 9:46:48 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\openstack\instances\instance-00000001\root.vhdx.	51	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	696	hv-osbrick-7805	S-1-5-18	5/1/2021 9:46:37 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\openstack\instances\instance-00000001\root.vhdx (target '').	50	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4216	4016	hv-osbrick-7805	S-1-5-18	5/1/2021 9:46:37 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\openstack\instances\instance-00000001\root.vhdx.	51	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3572	hv-osbrick-7805	S-1-5-18	5/1/2021 9:46:37 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\openstack\instances\instance-00000001\root.vhdx (target '').	50	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4216	4016	hv-osbrick-7805	S-1-5-18	5/1/2021 9:46:37 AM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]