Message	Id	Version	Qualifiers	Level	Task	Opcode	Keywords	RecordId	ProviderName	ProviderId	LogName	ProcessId	ThreadId	MachineName	UserId	TimeCreated	ActivityId	RelatedActivityId	ContainerLog	MatchedQueryIds	Bookmark	LevelDisplayName	OpcodeDisplayName	TaskDisplayName	KeywordsDisplayNames	Properties
The VHD C:\smbshare\volume-80a241ed-eb11-42fa-9070-14807b90b25f.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	56	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2508	3588	hv-osbrick-7857	S-1-5-83-1-3292489518-1270451794-691734457-2012091073	4/9/2021 8:28:04 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-80a241ed-eb11-42fa-9070-14807b90b25f.43d123c1-bc36-4f0b-93d0-6f1e9b793205.vhdx (target 'C:\smbshare\volume-80a241ed-eb11-42fa-9070-14807b90b25f.vhdx').	50	0		4	0	0	-9223372036854775808	55	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1800	2340	hv-osbrick-7857	S-1-5-18	4/9/2021 8:27:56 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-80a241ed-eb11-42fa-9070-14807b90b25f.43d123c1-bc36-4f0b-93d0-6f1e9b793205.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	54	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2144	4008	hv-osbrick-7857	S-1-5-83-1-3292489518-1270451794-691734457-2012091073	4/9/2021 8:27:56 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-83f45f9f-f394-49ff-8672-4b87189f4237.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	53	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3080	4412	hv-osbrick-7857	S-1-5-83-1-1599726144-1317966424-2211936190-1655918839	4/9/2021 8:27:50 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-83f45f9f-f394-49ff-8672-4b87189f4237.vhdx.	51	0		4	0	0	-9223372036854775808	52	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4368	hv-osbrick-7857	S-1-5-18	4/9/2021 8:26:06 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-83f45f9f-f394-49ff-8672-4b87189f4237.vhdx (target '').	50	0		4	0	0	-9223372036854775808	51	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	1412	hv-osbrick-7857	S-1-5-18	4/9/2021 8:26:04 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-83f45f9f-f394-49ff-8672-4b87189f4237.vhdx.	51	0		4	0	0	-9223372036854775808	50	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1700	hv-osbrick-7857	S-1-5-18	4/9/2021 8:26:04 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-83f45f9f-f394-49ff-8672-4b87189f4237.vhdx (target '').	50	0		4	0	0	-9223372036854775808	49	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	2904	hv-osbrick-7857	S-1-5-18	4/9/2021 8:26:04 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-80a241ed-eb11-42fa-9070-14807b90b25f.43d123c1-bc36-4f0b-93d0-6f1e9b793205.vhdx.	51	0		4	0	0	-9223372036854775808	48	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4872	hv-osbrick-7857	S-1-5-18	4/9/2021 8:26:01 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-80a241ed-eb11-42fa-9070-14807b90b25f.43d123c1-bc36-4f0b-93d0-6f1e9b793205.vhdx (target '').	50	0		4	0	0	-9223372036854775808	47	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1800	1132	hv-osbrick-7857	S-1-5-18	4/9/2021 8:26:01 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-80a241ed-eb11-42fa-9070-14807b90b25f.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	46	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4288	3732	hv-osbrick-7857	S-1-5-83-1-3292489518-1270451794-691734457-2012091073	4/9/2021 8:26:01 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-80a241ed-eb11-42fa-9070-14807b90b25f.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	45	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4640	1692	hv-osbrick-7857	S-1-5-83-1-3985411071-1294308537-1364384144-3533873396	4/9/2021 8:24:08 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-80a241ed-eb11-42fa-9070-14807b90b25f.vhdx.	51	0		4	0	0	-9223372036854775808	44	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1640	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:53 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-80a241ed-eb11-42fa-9070-14807b90b25f.vhdx (target '').	50	0		4	0	0	-9223372036854775808	43	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	4180	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:53 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-80a241ed-eb11-42fa-9070-14807b90b25f.vhdx.	51	0		4	0	0	-9223372036854775808	42	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4148	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:51 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-80a241ed-eb11-42fa-9070-14807b90b25f.vhdx (target '').	50	0		4	0	0	-9223372036854775808	41	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	3632	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:51 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\openstack\instances\instance-00000001\root.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	40	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2296	3488	hv-osbrick-7857	S-1-5-83-1-1934281065-1210353751-3259776645-3884082976	4/9/2021 8:21:48 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-ab70782b-11eb-4dad-8bf5-ff1b89c5461e.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	39	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2296	3868	hv-osbrick-7857	S-1-5-83-1-1934281065-1210353751-3259776645-3884082976	4/9/2021 8:21:44 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	38	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1248	2684	hv-osbrick-7857	S-1-5-83-1-2817764856-1320927589-3424275845-4002044552	4/9/2021 8:21:32 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Vhd Chain for VHD C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.d4d1ed89-d2b9-43d9-acdc-c0eaea3d4604.vhdx is corrupted. The expected LastWriteGUID {73A97FCB-9B86-4A07-AEC2-5295801E042F} ({00000000-0000-0000-0000-000000000000}) did not match the parent's actual LastWriteGUID ({AE98F855-2C9E-45A3-A671-CE5904F7037A}).	7	0		2	0	0	-9223372036854775808	37	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	4804	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:29 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Vhd Chain for VHD C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.d4d1ed89-d2b9-43d9-acdc-c0eaea3d4604.vhdx is corrupted. The expected LastWriteGUID {73A97FCB-9B86-4A07-AEC2-5295801E042F} ({00000000-0000-0000-0000-000000000000}) did not match the parent's actual LastWriteGUID ({AE98F855-2C9E-45A3-A671-CE5904F7037A}).	7	0		2	0	0	-9223372036854775808	36	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	4804	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:29 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The Vhd Chain for VHD C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.d4d1ed89-d2b9-43d9-acdc-c0eaea3d4604.vhdx is corrupted. The expected LastWriteGUID {73A97FCB-9B86-4A07-AEC2-5295801E042F} ({00000000-0000-0000-0000-000000000000}) did not match the parent's actual LastWriteGUID ({AE98F855-2C9E-45A3-A671-CE5904F7037A}).	7	0		2	0	0	-9223372036854775808	35	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	4804	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:29 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Error	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.d4d1ed89-d2b9-43d9-acdc-c0eaea3d4604.vhdx (target 'C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.vhdx').	50	0		4	0	0	-9223372036854775808	34	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1800	5072	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:27 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.d4d1ed89-d2b9-43d9-acdc-c0eaea3d4604.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	33	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2552	4124	hv-osbrick-7857	S-1-5-83-1-2817764856-1320927589-3424275845-4002044552	4/9/2021 8:21:27 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-6a5076a6-0f4c-472d-9299-ca6b4282d303.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	32	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4548	5080	hv-osbrick-7857	S-1-5-83-1-907069026-1093144112-1853243806-3317164920	4/9/2021 8:21:21 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-6a5076a6-0f4c-472d-9299-ca6b4282d303.vhdx.	51	0		4	0	0	-9223372036854775808	31	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3096	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:09 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-6a5076a6-0f4c-472d-9299-ca6b4282d303.vhdx (target '').	50	0		4	0	0	-9223372036854775808	30	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	4180	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:07 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-6a5076a6-0f4c-472d-9299-ca6b4282d303.vhdx.	51	0		4	0	0	-9223372036854775808	29	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4480	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:07 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-6a5076a6-0f4c-472d-9299-ca6b4282d303.vhdx (target '').	50	0		4	0	0	-9223372036854775808	28	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	2928	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:07 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.d4d1ed89-d2b9-43d9-acdc-c0eaea3d4604.vhdx.	51	0		4	0	0	-9223372036854775808	27	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1056	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:01 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.d4d1ed89-d2b9-43d9-acdc-c0eaea3d4604.vhdx (target '').	50	0		4	0	0	-9223372036854775808	26	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1800	4076	hv-osbrick-7857	S-1-5-18	4/9/2021 8:21:01 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	25	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	88	1688	hv-osbrick-7857	S-1-5-83-1-2817764856-1320927589-3424275845-4002044552	4/9/2021 8:21:01 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\openstack\instances\instance-00000001\root.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	24	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3684	1600	hv-osbrick-7857	S-1-5-83-1-1934281065-1210353751-3259776645-3884082976	4/9/2021 8:20:56 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-ab70782b-11eb-4dad-8bf5-ff1b89c5461e.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	23	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	3684	1600	hv-osbrick-7857	S-1-5-83-1-1934281065-1210353751-3259776645-3884082976	4/9/2021 8:20:56 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.vhdx.	51	0		4	0	0	-9223372036854775808	22	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4888	hv-osbrick-7857	S-1-5-18	4/9/2021 8:20:41 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.vhdx (target '').	50	0		4	0	0	-9223372036854775808	21	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	4636	hv-osbrick-7857	S-1-5-18	4/9/2021 8:20:41 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.vhdx.	51	0		4	0	0	-9223372036854775808	20	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4732	hv-osbrick-7857	S-1-5-18	4/9/2021 8:20:39 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-a7e2f35c-2246-46ec-bc1e-e6e239f7fff6.vhdx (target '').	50	0		4	0	0	-9223372036854775808	19	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	2560	hv-osbrick-7857	S-1-5-18	4/9/2021 8:20:39 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Merge VHD for C:\smbshare\volume-cea518e6-80c9-4608-b151-1da5261e00fd.e2a9cf3f-47ef-47b2-8e08-2e98763d5be7.vhdx (target 'C:\smbshare\volume-cea518e6-80c9-4608-b151-1da5261e00fd.vhdx').	50	0		4	0	0	-9223372036854775808	18	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	4212	hv-osbrick-7857	S-1-5-18	4/9/2021 8:20:24 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
The VHD C:\smbshare\volume-63ec64e8-70c5-430c-a0e6-5ff2b965a2aa.vhdx has been removed (unsurfaced) as disk number 0.	2	0		4	0	0	-9223372036854775808	17	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4760	1948	hv-osbrick-7857	S-1-5-83-1-3134059585-1290778945-318973618-287304146	4/9/2021 8:20:19 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-63ec64e8-70c5-430c-a0e6-5ff2b965a2aa.vhdx.	51	0		4	0	0	-9223372036854775808	16	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4332	hv-osbrick-7857	S-1-5-18	4/9/2021 8:20:05 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-63ec64e8-70c5-430c-a0e6-5ff2b965a2aa.vhdx (target '').	50	0		4	0	0	-9223372036854775808	15	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	1408	hv-osbrick-7857	S-1-5-18	4/9/2021 8:20:04 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-63ec64e8-70c5-430c-a0e6-5ff2b965a2aa.vhdx.	51	0		4	0	0	-9223372036854775808	14	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3964	hv-osbrick-7857	S-1-5-18	4/9/2021 8:20:04 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-63ec64e8-70c5-430c-a0e6-5ff2b965a2aa.vhdx (target '').	50	0		4	0	0	-9223372036854775808	13	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	2304	hv-osbrick-7857	S-1-5-18	4/9/2021 8:20:04 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-ab70782b-11eb-4dad-8bf5-ff1b89c5461e.vhdx.	51	0		4	0	0	-9223372036854775808	12	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	1096	hv-osbrick-7857	S-1-5-18	4/9/2021 8:20:00 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-ab70782b-11eb-4dad-8bf5-ff1b89c5461e.vhdx (target '').	50	0		4	0	0	-9223372036854775808	11	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	4908	hv-osbrick-7857	S-1-5-18	4/9/2021 8:20:00 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-cea518e6-80c9-4608-b151-1da5261e00fd.e2a9cf3f-47ef-47b2-8e08-2e98763d5be7.vhdx.	51	0		4	0	0	-9223372036854775808	10	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	4508	hv-osbrick-7857	S-1-5-18	4/9/2021 8:19:56 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-cea518e6-80c9-4608-b151-1da5261e00fd.e2a9cf3f-47ef-47b2-8e08-2e98763d5be7.vhdx (target '').	50	0		4	0	0	-9223372036854775808	9	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	1704	hv-osbrick-7857	S-1-5-18	4/9/2021 8:19:56 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\smbshare\volume-cea518e6-80c9-4608-b151-1da5261e00fd.vhdx.	51	0		4	0	0	-9223372036854775808	8	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3352	hv-osbrick-7857	S-1-5-18	4/9/2021 8:19:55 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\smbshare\volume-cea518e6-80c9-4608-b151-1da5261e00fd.vhdx (target '').	50	0		4	0	0	-9223372036854775808	7	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	1580	hv-osbrick-7857	S-1-5-18	4/9/2021 8:19:54 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\smbshare\volume-cea518e6-80c9-4608-b151-1da5261e00fd.vhdx.	51	0		4	0	0	-9223372036854775808	6	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3532	hv-osbrick-7857	S-1-5-18	4/9/2021 8:19:53 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\smbshare\volume-cea518e6-80c9-4608-b151-1da5261e00fd.vhdx (target '').	50	0		4	0	0	-9223372036854775808	5	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	2512	2928	hv-osbrick-7857	S-1-5-18	4/9/2021 8:19:53 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Expand VHD C:\openstack\instances\instance-00000001\root.vhdx.	51	0		4	0	0	-9223372036854775808	4	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3512	hv-osbrick-7857	S-1-5-18	4/9/2021 8:19:46 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Expand VHD for C:\openstack\instances\instance-00000001\root.vhdx (target '').	50	0		4	0	0	-9223372036854775808	3	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1800	5020	hv-osbrick-7857	S-1-5-18	4/9/2021 8:19:46 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Successfully performed Create VHD C:\openstack\instances\instance-00000001\root.vhdx.	51	0		4	0	0	-9223372036854775808	2	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	4	3548	hv-osbrick-7857	S-1-5-18	4/9/2021 8:19:46 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]
Performing Create VHD for C:\openstack\instances\instance-00000001\root.vhdx (target '').	50	0		4	0	0	-9223372036854775808	1	Microsoft-Windows-VHDMP	e2816346-87f4-4f85-95c3-0c79409aa89d	Microsoft-Windows-VHDMP-Operational	1800	1712	hv-osbrick-7857	S-1-5-18	4/9/2021 8:19:46 PM			microsoft-windows-vhdmp-operational	System.UInt32[]	System.Diagnostics.Eventing.Reader.EventBookmark	Information	Info		System.Collections.ObjectModel.ReadOnlyCollection`1[System.String]	System.Collections.Generic.List`1[System.Diagnostics.Eventing.Reader.EventProperty]